TI-2022-17784 CVE-2022-38070 · GHSA-h8mj-33h3-x93p
WordPress Pop-up plugin <= 1.1.5 - Privilege Escalation vulnerability
Priority MEDIUM 40
Privilege Escalation (subscriber+) vulnerability in Pop-up plugin <= 1.1.5 at WordPress.
No Mypopups vulnerabilities are listed in CISA KEV.
3 records
Privilege Escalation (subscriber+) vulnerability in Pop-up plugin <= 1.1.5 at WordPress.
Several plugins for WordPress by Inisev are vulnerable to unauthorized installation of plugins due to a missing capability check on the handle_installation function that is called via the inisev_installation AJAX aciton…
Several plugins for WordPress by Inisev are vulnerable to Cross-Site Request Forgery to unauthorized installation of plugins due to a missing nonce check on the handle_installation function that is called via the inisev_…