Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2023-64027
HistoryJul 26, 2022 - 12:00 a.m.

WordPress Sygnoos Popup Builder Cross-Site Request Forgery Vulnerability

2022-07-2600:00:00
China National Vulnerability Database
www.cnvd.org.cn
5

0.001 Low

EPSS

Percentile

21.0%

WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL. A cross-site request forgery vulnerability exists in WordPress Sygnoos Popup Builder 4.1.11 and prior versions, which arises from a web application that does not adequately validate that a request is coming from a trusted user. The vulnerability can be exploited to spoof a malicious request to trick a victim into clicking on it to perform a sensitive action.

0.001 Low

EPSS

Percentile

21.0%