Popup Builder <= 4.4.5 - Missing Authorization to Unauthenticated Arbitrary Popup Post Trashing via 'post_type' and 'sg_popup_preview_id' Parameters

Özet

Türkçe özeti henüz hazır değil; şimdilik kaynağın kendi açıklamasını gösteriyoruz.

The Popup Builder – Create highly converting, mobile friendly marketing popups. plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 4.4.5 This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for unauthenticated attackers to trash all published popups on the site with a single unauthenticated GET request. The attack is amplified by a second flaw in SGPopup::find(), which returns false for every normally published popup when the sg_popup_preview_id parameter is present, causing the trash branch to fire against every popup on the site simultaneously.

Etkilenen sürümler1 yazılım

Kaynaklar10 kaynak

• CVE.org kaydı
• NVD kaydı
• wordfence.com/…lities/id/13af3a6e-d3ef-41f0-9424-fe2c9b17c8bb Diğer
• plugins.trac.wordpress.org/…lder/tags/4.4.5/com/classes/popups/SGPopup.php Diğer
• plugins.trac.wordpress.org/…pup-builder/tags/4.4.5/com/classes/Filters.php Diğer
• plugins.trac.wordpress.org/…pup-builder/tags/4.4.5/com/classes/Filters.php Diğer
• plugins.trac.wordpress.org/…lder/tags/4.4.5/com/classes/popups/SGPopup.php Diğer
• plugins.trac.wordpress.org/…lder/tags/4.4.5/com/classes/popups/SGPopup.php Diğer
• wordpress.org/plugins/popup-builder Diğer
• plugins.trac.wordpress.org/…p-builder/trunk/com/classes/popups/SGPopup.php Diğer

Kayıt geçmişi

1. 31 Eki 2026 09:44Yayımlandı

İlgili açıklar

• 6,5 CVE-2026-103997Redux Framework <= 4.5.15 - Missing Authorization to Authenticated (Subscriber+) Sensitive Information Disclosure via…
• 4,3 CVE-2025-11455Perfect Images <= 7.2.0 - Missing Authorization to Authenticated (Author+) Image Replacement
• 5,9 CVE-2026-110023WP Data Access <= 5.5.88 - Missing Authorization to Unauthenticated Sensitive Information Exposure via 'rel_tab' Parameter
• 5,3 CVE-2026-11396Product Filter for WooCommerce by WBW <= 3.4.6 - Missing Authorization to Unauthenticated Information Disclosure via filterSettings[default_query] Parameter
• 4,3 CVE-2026-109386Hustle <= 7.8.14.3 - Missing Authorization to Authenticated (Custom+) ESP Credential Overwrite and Irreversible OAuth…
• 9,1 CVE-2026-116557WP Booking System <= 2.1.0.5 - Missing Authorization to Unauthenticated Arbitrary Calendar Note Deletion via wpbs_calendar_remove_note AJAX Action