Access violation vulnerability in Popup Builder – Create highly converting, mobile friendly marketing popups. 3.71

The Popup Builder plugin for WordPress is vulnerable to a security issue in versions up to and including version 3.71. This issue can allow attackers to do things like import subscribers and send newsletters, without needing the proper authorization. This is because the plugin is missing the ability to check whether someone is allowed to do these things before allowing them to do them.