The Popup Builder (Easy Notify Lite) plugin for WordPress is not secure and can be changed without permission. This is because it does not check if users have the right permissions before resetting the plugin’s settings. This means that anyone who is logged in with Subscriber-level access or higher can change the settings to their original state.
This information is sourced from www.wpvulnerability.com. An open-source database of vulnerabilities maintained by the community. Help us out by submitting vulnerabilities!
Version compare shows which versions have a vulnerability. For example: >= 2.2.8 <= 2.2.21 means:
> from 2.2.8
= including 2.2.8 & 2.2.21
< to 2.2.21
Is this information incorrect? Please leave us a message.
