Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2022-16920
HistoryFeb 16, 2022 - 12:00 a.m.

WordPress Custom Popup Builde plugin denial of service vulnerability

2022-02-1600:00:00
China National Vulnerability Database
www.cnvd.org.cn
10

0.001 Low

EPSS

Percentile

48.5%

WordPress is the Wordpress Foundation’s set of blogging platforms developed using the PHP language. The platform supports the hosting of personal blog sites on PHP and MySQL servers. A denial of service vulnerability exists in versions of the WordPress Custom Popup Builde plugin prior to 1.3.1, which stems from a popup window on each page that automatically loads data that can be sent by an unauthenticated user and is not length-validated The vulnerability can be exploited by attackers to cause a denial of service.

0.001 Low

EPSS

Percentile

48.5%