CVE-2022-0214
High
Description
The Custom Popup Builder WordPress plugin before 1.3.1 autoload data from its popup on every pages, as such data can be sent by unauthenticated user, and is not validated in length, this could cause a denial of service on the blog
SeverityHigh
CVSS7.5
Exploit probability—
ProductCustom Popup Builder
PublishedFeb 14, 2022
First seenFeb 14, 2022
Weakness typeCWE-1284CWE-1284
How to fix
Update
- custom_popup_builder_project custom_popup_builder1.3.1 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| custom_popup_builder_project custom_popup_builder | v < 1.3.1 | 1.3.1 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.