Popup Builder vulnerabilities
We track 2 vulnerabilities in Popup Builder products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on August 29, 2024.
2vulnerabilities
0critical
2high
0exploited
7.3average CVSS score
Latest Popup Builder vulnerabilities
- 7.5 High severity
Popup Builder – Create highly converting…: Exposure of Sensitive Information to an Unauthorized Actor
The Popup Builder plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 4.3.6 via the Subscribers Import feature. This makes it possible for unauthenticated attackers to extract sensitive data after an admin
- 7.2 High severity
Popup Builder: Improper Limitation of a Pathname to a Restricted Directory
The Popup Builder WordPress plugin before 4.2.6 does not validate a parameter before making a request to it, which could allow users with the administrator role to perform SSRF attack in Multisite WordPress configurations.