CVE-2022-4124

The Popup Manager WordPress plugin through 1.6.6 does not have authorisation and CSRF checks when deleting popups, which could allow unauthenticated users to delete them

Score

CVSS 3.1 4.3 Medium

Status

Modified - contact@wpscan.com

Published

2022-12-19

Last modified

2025-04-14

Weaknesses

CWE-352, CWE-862

Affected products

• Popup Manager (Popup Manager Project)
• Popup Manager (Unknown)

References

• https://wpscan.com/vulnerability/60786bf8-c0d7-4d80-b189-866aba79bce2