CVE-2026-32428

Missing Authorization vulnerability in Ays Pro Popup Like box ays-facebook-popup-likebox allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Popup Like box: from n/a through <= 3.7.7.

Score

CVSS 3.1 5.3 Medium

Status

Deferred - audit@patchstack.com

Published

2026-03-13

Last modified

2026-04-29

Weaknesses

CWE-862

Affected products

• Popup Like Box (Ays Pro)

References

• https://patchstack.com/database/Wordpress/Plugin/ays-facebook-popup-likebox/vulnerability/wordpress-popup-like-box-plug…