CVE-2022-32289

Cross-Site Request Forgery CSRF vulnerability in Sygnoos Popup Builder plugin = 4.1.0 at WordPress leading to popup status change...

CVE-2022-32289 WordPress Popup Builder plugin <= 4.1.0 - Cross-Site Request Forgery (CSRF) vulnerability leading to Popup Status Change

Cross-Site Request Forgery CSRF vulnerability in Sygnoos Popup Builder plugin = 4.1.0 at WordPress leading to popup status change...

CVE-2022-32289

CVE-2022-32289 affects WordPress Popup Builder plugin (Sygnoos Popup Builder) up to version 4.1.0. The root cause is a missing CSRF check when updating popup status, enabling a CSRF attack to change popup status for authenticated users. Public references from multiple sources (NVD, CVE records, P...