The Custom Popup Builder WordPress plugin before 1.3.1 autoload data from its popup on every pages, as such data can be sent by unauthenticated user, and is not validated in length, this could cause a denial of service on the blog
References
| Link | Resource |
|---|---|
| https://wpscan.com/vulnerability/ca2e8feb-15d6-4965-ad9c-8da1bc01e0f4 | Exploit Third Party Advisory |
| https://wpscan.com/vulnerability/ca2e8feb-15d6-4965-ad9c-8da1bc01e0f4 | Exploit Third Party Advisory |
Configurations
Configuration 1 (hide)
|
History
21 Nov 2024, 06:38
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://wpscan.com/vulnerability/ca2e8feb-15d6-4965-ad9c-8da1bc01e0f4 - Exploit, Third Party Advisory |
07 Nov 2023, 03:41
| Type | Values Removed | Values Added |
|---|---|---|
| CWE |
02 Aug 2023, 17:25
| Type | Values Removed | Values Added |
|---|---|---|
| CPE | cpe:2.3:a:custom_popup_builder_project:custom_popup_builder:*:*:*:*:*:wordpress:*:* | |
| First Time |
Custom Popup Builder Project
Custom Popup Builder Project custom Popup Builder |
24 Jul 2023, 10:15
| Type | Values Removed | Values Added |
|---|---|---|
| Summary | The Custom Popup Builder WordPress plugin before 1.3.1 autoload data from its popup on every pages, as such data can be sent by unauthenticated user, and is not validated in length, this could cause a denial of service on the blog |
21 Jul 2023, 16:53
| Type | Values Removed | Values Added |
|---|---|---|
| CWE | CWE-1284 |
Information
Published : 2022-02-14 12:15
Updated : 2024-11-21 06:38
NVD link : CVE-2022-0214
Mitre link : CVE-2022-0214
CVE.ORG link : CVE-2022-0214
JSON object : View
Products Affected
custom_popup_builder_project
- custom_popup_builder
CWE
CWE-1284
Improper Validation of Specified Quantity in Input