vulnerability

WordPress Plugin: m-wp-popup: CVE-2022-0214: Uncontrolled Resource Consumption

Severity
5
CVSS
(AV:N/AC:L/Au:N/C:N/I:N/A:P)
Published
Jan 17, 2022
Added
May 15, 2025
Modified
May 15, 2025

Description

The Popup | Custom Popup Builder WordPress plugin before 1.3.1 autoload data from its popup on every pages, as such data can be sent by unauthenticated user, and is not validated in length, this could cause a denial of service on the blog

Solution

m-wp-popup-plugin-cve-2022-0214
Title
NEW

Explore Exposure Command

Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.