WordPress Easy Notify Lite plugin <= 1.1.29 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Rayhan Ramdhany Hanaputra Patchstack Alliance in WordPress Plugin Popup Builder versions = 1.1.29...

WordPress Popup Builder Plugin <= 1.1.29 is vulnerable to Cross Site Scripting (XSS)

Software Popup Builder Type Plugin Vulnerable versions = 1.1.29 Fixed in 1.1.30 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-34567 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 42654a589b9a Credits Rayhan Ramdhany Hanaputra Required...

CVE-2024-33691

Cross-Site Request Forgery CSRF vulnerability in OptinMonster Popup Builder Team OptinMonster.This issue affects OptinMonster: from n/a through 2.15.3...

CVE-2024-33691 WordPress Popup Builder by OptinMonster plugin <= 2.15.3 - Cross Site Request Forgery (CSRF) Notice Dismissal vulnerability

Cross-Site Request Forgery CSRF vulnerability in OptinMonster Popup Builder Team OptinMonster.This issue affects OptinMonster: from n/a through 2.15.3...

CVE-2024-33691 WordPress Popup Builder by OptinMonster plugin <= 2.15.3 - Cross Site Request Forgery (CSRF) Notice Dismissal vulnerability

Cross-Site Request Forgery CSRF vulnerability in OptinMonster Popup Builder Team OptinMonster.This issue affects OptinMonster: from n/a through 2.15.3...

CVE-2024-33691

CVE-2024-33691 is a Cross-Site Request Forgery (CSRF) vulnerability in the OptinMonster Popup Builder for WordPress (Plugin: Popup Builder by OptinMonster) tracked across multiple sources. Affected versions are listed as up to 2.15.3 (n/a through 2.15.3). The connected data describe exploitation ...

CVE-2024-2008

The Modal Popup Box – Popup Builder, Show Offers And News in Popup plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 1.5.2 via deserialization of untrusted input in the awlmodalpopupboxshortcode function. This makes it possible for authenticated...

Brave Popup Builder < 0.6.6 - Unauthenticated Server-Side Request Forgery

Description The Brave – Create Popup, Optins, Lead Generation, Survey, Sticky Elements & Interactive Content plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 0.6.5. This makes it possible for unauthenticated attackers to make web requests to...

Modal Popup Box – Popup Builder, Show Offers And News in Popup < 1.5.3 - Authenticated (Contributor+) PHP Object Injection in awl_modal_popup_box_shortcode

Description The Modal Popup Box – Popup Builder, Show Offers And News in Popup plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 1.5.2 via deserialization of untrusted input in the awlmodalpopupboxshortcode function. This makes it possible for...

Popup Builder < 4.2.7 - Contributor Stored XSS

Description The plugin is vulnerable to Stored Cross-Site Scripting via the plugin's sgpopup shortcode due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers with contributor-level and above permissions to inject...

CVE-2024-30453

Server-Side Request Forgery SSRF vulnerability in Brave Brave Popup Builder.This issue affects Brave Popup Builder: from n/a through 0.6.5...

CVE-2024-30453

CVE-2024-30453 is an SSRF vulnerability in Brave Popup Builder (WordPress plugin). Affected: Brave Popup Builder up to version 0.6.5. Patch status in the connected data indicates a fix was released after exposure.

PT-2024-23382 · Brave · Brave Popup Builder

Name of the Vulnerable Software and Affected Versions: Brave Popup Builder versions 0.6.5 and earlier Description: A Server-Side Request Forgery SSRF issue affects the Brave Popup Builder, allowing unauthorized access to internal resources. No information is provided about the estimated number of...

WordPress Brave Popup Builder Plugin <= 0.6.5 is vulnerable to Server Side Request Forgery (SSRF)

Software Brave Popup Builder Type Plugin Vulnerable versions = 0.6.5 Fixed in 0.6.6 OWASP Top 10 A10: Server-Side Request Forgery SSRF Classification Server Side Request Forgery SSRF CVE CVE-2024-30453 Patch priority Medium CVSS severity Medium 5.4 Developer Claim ownership PSID 8769cfe45747...

CVE-2024-30184 WordPress Popup Builder plugin <= 4.2.6 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Looking Forward Software Incorporated. Popup Builder allows Stored XSS.This issue affects Popup Builder: from n/a through 4.2.6...

CVE-2024-30184

Technical details about CVE-2024-30184 (Popup Builder XSS) are not provided in the Connected Documents. No product/version specifics or remediation are disclosed here. Monitor for updates from vendors and advisories.

WordPress Plugin Popup Builder 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed in the PHP language that supports personal blogs on PHP and MySQL servers.WordPress plugin is an application...

WordPress Popup Builder Plugin <= 4.2.6 is vulnerable to Cross Site Scripting (XSS)

Software Popup Builder Type Plugin Vulnerable versions = 4.2.6 Fixed in 4.2.7 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-30184 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID be71da5ede09 Credits LVT-tholv2k Required privilege Contribut...

The vulnerability of the Popup Builder plugin of the WordPress content management system allows attackers to carry out cross-site scripting attacks.

The vulnerability of the Popup Builder plugin in the WordPress content management system exists due to the lack of security measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks...

Popup Builder Plugin for WordPress < 4.2.3 Cross-Site Scripting

The WordPress Popup Builder Plugin installed on the remote host is affected by an unauthenticated stored Cross-Site Scripting XSS. Note that the scanner has not tested for these issues but has instead relied only on the application's self-reported version number. No source data...