CVE-2025-15611

The Popup Box WordPress plugin (versions before 5.5.0 ) is vulnerable to a Cross-Site Request Forgery (CSRF) attack due to improper nonce validation within the add_or_edit_popupbox() function when saving popup data. This flaw allows unauthenticated attackers to trick an authenticated administrato...