CVE-2022-29495

概要

参考情報

• patchstack.com/database/vulnerability/popup-builder/wordpress-popup-builder-plugin-4-1-11-cross-site-request-forgery-csrf-leading-to-plugin-settings-update · Patch
• wordpress.org/plugins/popup-builder · Release Notes

popup builder のその他の脆弱性

• CVE-2024-9428中 4.8The Popup Builder WordPress plugin before 4.3.5 does not sanitise and escape some of its settings, which could allow high privilege users s…
• CVE-2024-2541高 7.5The Popup Builder plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 4.3.6 via the S…
• CVE-2024-2544中 6.4The Popup Builder plugin for WordPress is vulnerable to unauthorized modification of data and loss of data due to a missing capability check…
• CVE-2023-6696高 8.1The Popup Builder – Create highly converting, mobile friendly marketing popups. plugin for WordPress is vulnerable to unauthorized access of…
• CVE-2023-6294高 7.2The Popup Builder WordPress plugin before 4.2.6 does not validate a parameter before making a request to it, which could allow users with th…