Vulnerabilities and Security Researches

Popup by Supsystic, CVE-2022-0424

CVE, Research URL: CVE-2022-0424
Home page URL: Security reports for Popup by Supsystic
Application: Popup by Supsystic
Published on: May 09, 2022
Research Description: The Popup by Supsystic WordPress plugin before 1.10.9 does not have any authentication and authorisation in an AJAX action, allowing unauthenticated attackers to call it and get the email addresses of subscribed users
Affected versions: Min -, max 1.10.9.
Status: vulnerable