Vulnerabilidades de popupbuilder (CVE)

Registros CVE publicados para popupbuilder, los más recientes primero. Siga el producto para recibir un correo con cada nueva.

7 resultados
9.1Crítica
CVE-2026-89270

Popup Builder <= 4.4.5 - Missing Authorization to Unauthenticated Arbitrary Popup Post Trashing via 'post_type' and 'sg_popup_preview_id' Parameters

popupbuilder Popup Builder – Create highly converting, mobile friendly marketing popups.

The Popup Builder – Create highly converting, mobile friendly marketing popups. plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 4.4.5 This is due to the plugin not properly verifying that a user is authorized t…

5.3Media
CVE-2025-13079

Popup Builder - Create highly converting, mobile friendly marketing popups. <= 4.4.2 - Improper Authorization to Unauthenticated Subscriber Removal via Predictable Tokens

popupbuilder Popup Builder – Create highly converting, mobile friendly marketing popups.

The Popup Builder – Create highly converting, mobile friendly marketing popups. plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 4.4.2. This is due to the plugin generating predictable unsubscribe tokens using d…

6.4Media
CVE-2025-9856

Popup Builder – Create highly converting, mobile friendly marketing popups. <= 4.4.1 - Authenticated (Contributor+) Stored Cross-Site Scripting

popupbuilder Popup Builder – Create highly converting, mobile friendly marketing popups.

The Popup Builder – Create highly converting, mobile friendly marketing popups. plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'sg_popup' shortcode in all versions up to, and including, 4.4.1 due to insufficient input sanit…

5.3Media
CVE-2024-2541

Popup Builder <= 4.3.6 - Sensitive Information Exposure via Imported Subscribers CSV File

popupbuilder Popup Builder – Create highly converting, mobile friendly marketing popups.; popup_builder popup_builder

The Popup Builder plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 4.3.6 via the Subscribers Import feature. This makes it possible for unauthenticated attackers to extract sensitive data after an admi…

8.1Alta
CVE-2023-6696

Popup Builder – Create highly converting, mobile friendly marketing popups <= 4.3.1 - Missing Authorization and Nonce Exposure

popupbuilder Popup Builder – Create highly converting, mobile friendly marketing popups.

The Popup Builder – Create highly converting, mobile friendly marketing popups. plugin for WordPress is vulnerable to unauthorized access of functionality due to a missing capability check on several functions in all versions up to, and including, 4.3.1. Whil…

7.4Alta
CVE-2024-2544

Popup Builder <= 4.3.0 - Missing Authorization in Multiple AJAX Actions

popupbuilder Popup Builder – Create highly converting, mobile friendly marketing popups.

The Popup Builder plugin for WordPress is vulnerable to unauthorized modification of data and loss of data due to a missing capability check on all AJAX actions. This makes it possible for authenticated attackers, with subscriber-level access and above, to pe…