cleantalk
Vulnerabilities and Security Researches

Popup Maker – Popup for opt-ins, lead gen, & more, 6ff37c2e-e21d-4abc-bafe-8ca6a2c1ed76

Published on
-
Research Description
Popup Maker &#8211; Boost Sales, Conversions, Optins, Subscribers with the Ultimate WP Popup Builder [popup-maker] < 1.8.3 Freemius Library &lt; 2.2.4 - Subscriber+ Arbitrary Option Update The library, used in numerous plugins, does not have proper authorisation when updating blog options, allowing any authenticated users, such as subscriber to update arbitrary options
Affected versions
max 1.8.3.
Status
vulnerable