Input validation vulnerability in Popup Box – Create Countdown, Coupon, Video, Contact Form Popups 6.1.1

The Popup Box plugin for WordPress has a security issue that affects all versions up to 6.1.1. This is because the way it checks for a unique code is not secure. Instead of checking the code submitted in the request, it checks a code created by the plugin itself. This means that someone who is not logged in can manipulate the popups and change their status, as long as they can trick the site administrator into clicking a link.