Lucene search
HistoryDec 19, 2022 - 2:15 p.m.
CVE-2022-4124
popup manager
wordpress plugin
authorisation
csrf
deletion
unauthorized users
4.3 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
0.001 Low
EPSS
Percentile
47.3%
The Popup Manager WordPress plugin through 1.6.6 does not have authorisation and CSRF checks when deleting popups, which could allow unauthenticated users to delete them
Affected configurations
Node
popup_manager_projectpopup_managerRange≤1.6.6wordpress
Related
cvelist
cvelist
prion
prion
Cross site request forgery (csrf)
2022-12-19 14:15:00
wpexploit
wpexploit
Popup Manager <= 1.6.6 - Unauthenticated Arbitrary Popup Deletion
2022-11-28 00:00:00
wpvulndb
wpvulndb
Popup Manager <= 1.6.6 - Unauthenticated Arbitrary Popup Deletion
2022-11-28 00:00:00
cve
cve
CVE-2022-4124
2022-12-19 14:15:12
4.3 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
0.001 Low
EPSS
Percentile
47.3%
Related for NVD:CVE-2022-4124