WP Popup Builder – Popup Forms and Marketing Lead Generation, CVE-2022-2405
- CVE, Research URL
- Home page URL
-
Security reports for WP Popup Builder – Popup Forms and Marketing Lead Generation
- Published on
- Sep 26, 2022
- Research Description
- The WP Popup Builder WordPress plugin before 1.2.9 does not have authorisation and CSRF check in an AJAX action, allowing any authenticated users, such as subscribers to delete arbitrary Popup
- Affected versions
-
max 1.3.0.
- Status
-
vulnerable