WordPress Plugin Vulnerabilities
Popup | Custom Popup Builder < 1.3.1 - Unauthenticated Denial of Service
Description
The plugin autoload data from its popup on every pages, as such data can be sent by unauthenticated user, and is not validated in length, this could cause a denial of service on the blog
Proof of Concept
Affects Plugins
Fixed in 1.3.1 References
CVE
Miscellaneous
Original Researcher
Felipe de Avila
Submitter
Felipe de Avila
Verified
Yes
WPVDB ID
Timeline
Publicly Published
2022-01-17 (about 3 years ago)
Added
2022-01-17 (about 3 years ago)
Last Updated
2022-04-12 (about 3 years ago)
WPScan 