← back
CVE-2022-0214

Popup | Custom Popup Builder < 1.3.1 - Unauthenticated Denial of Service

3Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackepss 1.6%
exploitation probability
1.6%top 27% of all CVEs
observed exploitation
nono source reports it
The Custom Popup Builder WordPress plugin before 1.3.1 autoload data from its popup on every pages, as such data can be sent by unauthenticated user, and is not validated in length, this could cause a denial of service on the blog