The WordPress plugin Popup Builder – Responsive WordPress Pop up – Subscription & Newsletter has been found to suffer from a security flaw relating to authorization issues in most AJAX methods.

The vulnerability could be exploited by attackers to send out newsletters with custom content, or to delete or import newsletter subscribers.

For more information, please check the official public release.

If you have questions, don’t hesitate to contact our support team.

People that read this article also liked

Critical Vulnerabilities Found on PageLayer Page Builder Plugin Critical Security Flaw in outdated WooCommerce NAB Transact Plugin WordPress Websites Security Breach – Outbreak of Malicious File Attacks WordPress 5.7 “Esperanza” + WooCommerce 5.1 Released