Popup-Builder güvenlik açıkları (CVE)

Popup-Builder için yayımlanan CVE kayıtları, en yenisi üstte. Yeni bir açık çıktığında e-posta almak için takip edin.

3 sonuç

5.4Orta

CVE-2019-25744 5 ay önce

WordPress Popup Builder 3.49 Persistent Cross-Site Scripting

Popup-Builder Popup Builder

WordPress Popup Builder 3.49 contains a persistent cross-site scripting vulnerability that allows authenticated attackers to inject malicious scripts by breaking out of option tags in the post_title parameter. Attackers can submit crafted POST requests to the…

5.3Orta

CVE-2024-2541 2 yıl önce

Popup Builder <= 4.3.6 - Sensitive Information Exposure via Imported Subscribers CSV File

popupbuilder Popup Builder – Create highly converting, mobile friendly marketing popups.; popup_builder popup_builder

The Popup Builder plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 4.3.6 via the Subscribers Import feature. This makes it possible for unauthenticated attackers to extract sensitive data after an admi…

7.5Yüksek

CVE-2023-6294 2 yıl önce

popup-builder < 4.2.6 - Admin+ SSRF & File Read

Popup Builder; popup_builder popup_builder

The Popup Builder WordPress plugin before 4.2.6 does not validate a parameter before making a request to it, which could allow users with the administrator role to perform SSRF attack in Multisite WordPress configurations.