Exploit Report

Computer Security And Bug Information


CVE Title
Published Date2023-03-13T17:15Z
Modified Date2023-03-16T15:54Z
CWE TypeNVD-CWE-noinfo
DescriptionThe Popup Builder by OptinMonster WordPress plugin before 2.12.2 does not ensure that the campaign to be loaded via some shortcodes is actually a campaign, allowing any authenticated users such as subscriber to retrieve the content of arbitrary posts, like draft, private or even password protected ones.
By clicking these links you will leave this website. We do not endorse and will not be held accountable for any activity on external sites.
Reference URLhttps://wpscan.com/vulnerability/28754886-b7b4-44f7-9042-b81c542d3c9c
Reference DescriptionMISC https://wpscan.com/vulnerability/28754886-b7b4-44f7-9042-b81c542d3c9c
Reference Description
TagsExploit Third Party Advisory

This site's data is aggregated programmatically and provided "as is" without any representations or warranties, express or implied. Exploit.report is not affiliated with the The MITRE Corporation, U.S. Department of Homeland Security (DHS), Cybersecurity and Infrastructure Security Agency (CISA), or US government in any way. CVE and the CVE logo are registered trademarks of The MITRE Corporation

© 2022 Exploit.Report | Data | Contact | Privacy Policy | Articles