The WordPress plugin Popup Builder – Responsive WordPress Pop up – Subscription & Newsletter has been found to suffer from a security flaw relating to authorization issues in most AJAX methods.

The vulnerability could be exploited by attackers to send out newsletters with custom content, or to delete or import newsletter subscribers.

For more information, please check the official public release.

If you have questions, don’t hesitate to contact our support team.