The Custom Popup Builder WordPress plugin before 1.3.1 autoload data from its popup on every pages, as such data can be sent by unauthenticated user, and is not validated in length, this could cause a denial of service on the blog
References
| Link | Resource |
|---|---|
| https://wpscan.com/vulnerability/ca2e8feb-15d6-4965-ad9c-8da1bc01e0f4 | Exploit Third Party Advisory |
Configurations
Configuration 1 (hide)
|
History
07 Nov 2023, 03:41
| Type | Values Removed | Values Added |
|---|---|---|
| CWE |
02 Aug 2023, 17:25
| Type | Values Removed | Values Added |
|---|---|---|
| CPE | cpe:2.3:a:custom_popup_builder_project:custom_popup_builder:*:*:*:*:*:wordpress:*:* | |
| First Time |
Custom Popup Builder Project
Custom Popup Builder Project custom Popup Builder |
24 Jul 2023, 10:15
| Type | Values Removed | Values Added |
|---|---|---|
| Summary | The Custom Popup Builder WordPress plugin before 1.3.1 autoload data from its popup on every pages, as such data can be sent by unauthenticated user, and is not validated in length, this could cause a denial of service on the blog |
21 Jul 2023, 16:53
| Type | Values Removed | Values Added |
|---|---|---|
| CWE | CWE-1284 |
Information
Published : 2022-02-14 12:15
Updated : 2024-02-28 19:09
NVD link : CVE-2022-0214
Mitre link : CVE-2022-0214
CVE.ORG link : CVE-2022-0214
JSON object : View
Products Affected
custom_popup_builder_project
- custom_popup_builder
CWE
CWE-1284
Improper Validation of Specified Quantity in Input