Really Simple Security logo

Log out
Get PRO

Latest

Input validation vulnerability in Popup Builder – Create highly converting, mobile friendly marketing popups. 4.2.3

  • Severity: medium-risk
  • Status: Fixed
  • Publication: December 11, 2023

The Popup Builder plugin for WordPress has a security vulnerability that allows unauthenticated attackers to inject malicious scripts into the website. This means that anyone who visits the website could be exposed to malicious code. The vulnerability exists in versions of the plugin up to 4.2.3, due to a lack of input sanitization and output escaping. It’s important to upgrade to the latest version of the plugin to protect your website.

Detected in:

Popup Builder – Create highly converting, mobile friendly marketing popups. fixed vulnerable versions: >= * < 4.2.3

This information is sourced from www.wpvulnerability.com. An open-source database of vulnerabilities maintained by the community. Help us out by submitting vulnerabilities!

Version compare shows which versions have a vulnerability. For example: >= 2.2.8 <= 2.2.21 means:

> from 2.2.8
= including 2.2.8 & 2.2.21
< to 2.2.21

  • Incorrect?

Is this information incorrect? Please leave us a message.