Vulnerabilidades de Popup-Builder (CVE)

Registros CVE publicados para Popup-Builder, los más recientes primero. Siga el producto para recibir un correo con cada nueva.

3 resultados
5.4Media
CVE-2019-25744

WordPress Popup Builder 3.49 Persistent Cross-Site Scripting

Popup-Builder Popup Builder

WordPress Popup Builder 3.49 contains a persistent cross-site scripting vulnerability that allows authenticated attackers to inject malicious scripts by breaking out of option tags in the post_title parameter. Attackers can submit crafted POST requests to the…

5.3Media
CVE-2024-2541

Popup Builder <= 4.3.6 - Sensitive Information Exposure via Imported Subscribers CSV File

popupbuilder Popup Builder – Create highly converting, mobile friendly marketing popups.; popup_builder popup_builder

The Popup Builder plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 4.3.6 via the Subscribers Import feature. This makes it possible for unauthenticated attackers to extract sensitive data after an admi…

7.5Alta
CVE-2023-6294

popup-builder < 4.2.6 - Admin+ SSRF & File Read

Popup Builder; popup_builder popup_builder

The Popup Builder WordPress plugin before 4.2.6 does not validate a parameter before making a request to it, which could allow users with the administrator role to perform SSRF attack in Multisite WordPress configurations.