VulnCheck KEV: CVE-2019-17574

An issue was discovered in the Popup Maker plugin before 1.8.13 for WordPress. An unauthenticated attacker can partially control the arguments of the doaction function to invoke certain popmake or pum methods, as demonstrated by controlling content and delivery of popmake-system-info.txt...

CVE-2019-17574

creationtimestamp| type| source ---|---|--- 2024-01-08 14:41:43+00:00| seen| https://t.me/ctinow/164367 2025-06-26 21:02:23+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3lsjzkcrluq2j...

CVE-2019-17574

The CVE concerns the WordPress Popup Maker plugin prior to version 1.8.13. An unauthenticated attacker can partially control the arguments passed to the do_action function to invoke certain popmake_ or pum_ methods, demonstrated by manipulation of the popmake-system-info.txt “support debug text f...