Lucene search
China National Vulnerability DatabaseCNVD-2022-88257HistorySep 28, 2022 - 12:00 a.m.
WordPress WP Popup Builder licensing issue vulnerability
2022-09-2800:00:00
China National Vulnerability Database
www.cnvd.org.cn
6
wordpress
popup builder
authorization
vulnerability
csrf
ajax
php
deletion
0.001 Low
EPSS
Percentile
21.2%
WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a set of blogging platforms developed using the PHP language. WordPress plugin is an application plugin. WordPress WP Popup Builder version prior to 1.2.9 has an authorization issue vulnerability that stems from improper authorization and CSRF checks in certain AJAX operations, which can be exploited by an attacker to delete arbitrary Popups.
| CPE | Name | Operator | Version |
|---|---|---|---|
| wordpress wp popup builder | lt | 1.2.9 |
Related
cve
cve
CVE-2022-2405
2022-09-26 13:15:10
nvd
nvd
CVE-2022-2405
2022-09-26 13:15:10
patchstack
patchstack
wpvulndb
wpvulndb
WP Popup Builder < 1.3.0 - Subscriber+ Arbitrary Popup Deletion
2022-09-05 00:00:00
wpexploit
wpexploit
WP Popup Builder < 1.3.0 - Subscriber+ Arbitrary Popup Deletion
2022-09-05 00:00:00
prion
prion
Cross site request forgery (csrf)
2022-09-26 13:15:00
cvelist
cvelist