Vulnerability CVE-2022-29495

Vulnerability CVE-2022-29495

Published: 2022-07-22

Description:

Cross-Site Request Forgery (CSRF) vulnerability in Sygnoos Popup Builder plugin <= 4.1.11 at WordPress allows an attacker to update plugin settings.

Type:

CWE-352

(Cross-Site Request Forgery (CSRF))

References:

https://wordpress.org/plugins/popup-builder/#developers

https://patchstack.com/database/vulnerability/popup-builder/wordpress-popup-builder-plugin-4-1-11-cross-site-request-forgery-csrf-leading-to-plugin-settings-update