Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 2

Export CSV
CVE-2022-4124

Popup Manager <= 1.6.6 - Unauthenticated Arbitrary Popup Deletion

The Popup Manager WordPress plugin through 1.6.6 does not have authorisation and CSRF checks when deleting popups, which could allow unauthenticated users to delete them

CVSS 3.1 · 4.3 Medium EPSS < 1% KEV · Not listed
Vendors
Popup Manager Project
Products
Popup Manager
CVE-2022-4125

Popup Manager <= 1.6.6 - Unauthenticated Stored XSS

The Popup Manager WordPress plugin through 1.6.6 does not have authorisation and CSRF check when creating/updating popups, and is missing sanitisation as well as escaping, which could allow unauthenticated attackers to create arbitrary popups and add Stored XSS payloads as well

CVSS 3.1 · 4.3 Medium EPSS < 1% KEV · Not listed
Vendors
Popup Manager Project
Products
Popup Manager