sygnoos Vulnerabilities and Affected Products
Vulnerabilities associated with Popup Builder (WordPress plugin).
Products
Clear product- Popup Builder (WordPress plugin)2 vulnerabilities
- popup_builder2 vulnerabilities
- social_media_share_buttons2 vulnerabilities
- Social Media Share Buttons1 vulnerability
| Vulnerability | Title and context | CVSS | EPSS | PoCs | Signals | STIX action |
|---|---|---|---|---|---|---|
CVE-2022-29495MEDIUM | WordPress Popup Builder plugin <= 4.1.11 - Cross-Site Request Forgery (CSRF) leading to plugin settings updateCross-Site Request Forgery (CSRF) vulnerability in Sygnoos Popup Builder plugin <= 4.1.11 at WordPress allows an attacker to update plugin settings. | CVSS5.4v3.1 | EPSS0.495% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware use1 Nuclei template | STIX |
CVE-2022-32289MEDIUM | WordPress Popup Builder plugin <= 4.1.0 - Cross-Site Request Forgery (CSRF) vulnerability leading to Popup Status ChangeCross-Site Request Forgery (CSRF) vulnerability in Sygnoos Popup Builder plugin <= 4.1.0 at WordPress leading to popup status change. CWE-352Jul 21, 2022 | CVSS5.4v3.1 | EPSS0.318% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |