cleantalk
Vulnerabilities and Security Researches

Popup Builder – Create highly converting, mobile friendly marketing popups., CVE-2023-6294

CVE, Research URL

CVE-2023-6294

Published on
Feb 12, 2024
Research Description
The Popup Builder WordPress plugin before 4.2.6 does not validate a parameter before making a request to it, which could allow users with the administrator role to perform SSRF attack in Multisite WordPress configurations.
Affected versions
max 4.2.6.
Status
vulnerable