Approved changes feed: RSS · Atom

cpe:2.3:a:unknown:wp_popup_builder_–_popup_forms_,_marketing_popup_&__newsletter:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorUnknown (668ca391-a6cc-5e33-879b-83885214de33)
ProductWp Popup Builder – Popup Forms , Marketing Popup & Newsletter (1dc20554-b349-53f4-8bb4-504bbacd8e71)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2022-2405 vulnerable 2026-06-08 05:43:35.483101 WP Popup Builder < 1.3.0 - Subscriber+ Arbitrary Popup Deletion
The WP Popup Builder WordPress plugin before 1.2.9 does not have authorisation and CSRF check in an AJAX action, allowing any authenticated users, such as subscribers to delete arbitrary Popup
Published: 2022-09-26T12:35:34.000Z
Updated: 2025-05-21T19:19:27.568Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-2404 vulnerable 2026-06-08 05:43:35.481317 WP Popup Builder < 1.2.9 - Reflected Cross-Site Scripting
The WP Popup Builder WordPress plugin before 1.2.9 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting
Published: 2022-09-26T12:35:33.000Z
Updated: 2025-05-21T19:20:21.761Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.