The WordPress Popup Builder Plugin installed on the remote host is affected by an unauthenticated stored Cross-Site Scripting (XSS) and authenticated settings modification, configuration disclosure, and user data export vulnerabilities.
Note that the scanner has not tested for these issues but has instead relied only on the applicationβs self-reported version number.
No source data
Vendor | Product | Version | CPE |
---|---|---|---|
sygnoos | popup_builder | * | cpe:2.3:a:sygnoos:popup_builder:*:*:*:*:*:wordpress:*:* |