Veille CVE

Recherche « Popup-Builder Popup Builder »

3 CVE

Critique 0 Élevée 1 Moyenne 2 Faible 0 Non évaluée 0 Exploitées (KEV) Tri : plus récentes « Popup-Builder Popup Builder » ✕
  1. CVE-2026-77116 4.3 Moyenne

    Unknown Brave

    Brave Popup Builder (slug: brave-popup-builder) has a broken access control issue in versions through 0.8.5. Any logged-in user - Subscriber or WooCommerce Customer is enough — can read popup content they shouldn't have access to by passing a post ID in the URL.

  2. CVE-2026-77115 7.1 Élevée

    Unknown Brave

    Brave Popup Builder (brave-popup-builder) up to version 0.8.5 reflects UTM query parameters into popup form HTML without escaping them.

  3. CVE-2019-25744 5.4 Moyenne

    Popup-Builder Popup Builder

    WordPress Popup Builder 3.49 contains a persistent cross-site scripting vulnerability that allows authenticated attackers to inject malicious scripts by breaking out of option tags in the post_title parameter. Attackers can submit crafted POST requests to the post.php endpoint with script payloads in the post_title field that execute when pages or posts display popup selections.