CVE-2020-36715

The Login/Signup Popup plugin for WordPress is vulnerable to authorization bypass due to missing capability checks on several functions in versions up to, and including, 1.4. This makes it possible for authenticated attackers to inject arbitrary web scripts into the plugin settings that execute i...

CVE-2020-36715

The Login/Signup Popup plugin for WordPress is vulnerable to an authorization bypass in versions up to and including 1.4 . The root cause is missing capability checks on several functions, which allows authenticated attackers to inject arbitrary web scripts into the plugin settings. If an attacke...