Get a demo
100% Signal 0% Noise Invicti Logo - The Largest Dynamic Application Security Solutions Provider In The World Get a demo
WordPress Plugin WP Popup Builder-Popup Forms Marketing PoPuP Newsletter Multiple Vulnerabilities - CVE-2022-2404 - Vulnerability Database
WP Plugin Wp Popup Builder

WordPress Plugin WP Popup Builder-Popup Forms Marketing PoPuP Newsletter Multiple Vulnerabilities - CVE-2022-2404

Medium
Reference: CVE-2022-2404
NVD Link: https://nvd.nist.gov/vuln/detail/CVE-2022-2404
Title: WordPress Plugin WP Popup Builder-Popup Forms Marketing PoPuP Newsletter Multiple Vulnerabilities
Overview:

WordPress Plugin WP Popup Builder-Popup Forms Marketing PoPuP Newsletter is prone to multiple vulnerabilities including cross-site scripting and security bypass vulnerabilities. Exploiting these issues may allow an attacker to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site to steal cookie-based authentication credentials or to perform otherwise restricted actions and subsequently delete arbitrary popup. WordPress Plugin WP Popup Builder-Popup Forms Marketing PoPuP Newsletter version 1.2.8 is vulnerable prior versions may also be affected.