Popup by Supsystic < 1.10.9 - Unauthenticated Subscriber Email Addresses Disclosure
18Vexday Risk Score
Corrija em breve. Ela tem exploit funcional público.
ssvc Attendepss 3.0%
probabilidade de exploração
3.0%top 14% das CVEs
exploração observada
nãonenhuma fonte reporta
The Popup by Supsystic WordPress plugin before 1.10.9 does not have any authentication and authorisation in an AJAX action, allowing unauthenticated attackers to call it and get the email addresses of subscribed users
Produtos afetados
Unknown · Popup by Supsystic