Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

2 records

Vendor: Custom Popup Builder Project Component: Custom Popup Builder Clear all filters
TI-2022-11257 CVE-2022-28612 · GHSA-c4q2-v6rj-4mjp

Improper access control in Muneeb Custom Popup Builder

Priority LOW 25

Improper Access Control vulnerability leading to multiple Authenticated (contributor or higher user role) Stored Cross-Site Scripting (XSS) vulnerabilities in Muneeb's Custom Popup Builder plugin <= 1.3.1 at WordPress.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00499 Published 2022-06-15 No fix listed CWE-284
TI-2022-00151 CVE-2022-0214 · GHSA-7cgg-8926-325v

Popup | Custom Popup Builder < 1.3.1 - Unauthenticated Denial of Service

Priority LOW 36

The Custom Popup Builder WordPress plugin before 1.3.1 autoload data from its popup on every pages, as such data can be sent by unauthenticated user, and is not validated in length, this could cause a denial of service o…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01589 Published 2022-02-14 Fixed in 1.3.1 CWE-1284