← Database

CVE-2022-4124

MEDIUM CVSS: 4.3 Published: 2022-12-19 Modified: 2026-06-17

Description

The Popup Manager WordPress plugin through 1.6.6 does not have authorisation and CSRF checks when deleting popups, which could allow unauthenticated users to delete them

Affected Platforms

Popup Manager Project Popup Manager

Weakness Type

CWE-352, CWE-862

References