Information Disclosure and Settings Modification in Popup Builder Plugin for WordPress
CVE-2020-10195

6.3MEDIUM

Key Information:

Vendor
Wordpress
Status
Popup-builder
Vendor
CVE Published:
13 March 2020

Summary

The Popup Builder Plugin for WordPress prior to version 3.64.1 is susceptible to critical security vulnerabilities that allow authenticated users with minimal permissions (such as subscribers) to execute administrative actions. By manipulating the action parameter through the POST requests sent to wp-admin/admin-post.php, attackers can modify plugin settings, which may grant unauthorized roles access to sensitive functionalities. Additionally, they can export a list of newsletter subscribers and extract system configuration details, including the web server configuration and a list of installed plugins, leading to potential data breaches and privilege escalation.

References

https://wpvulndb.com/vulnerabilities/10127
x_refsource_MISC
https://www.wordfence.com/blog/2020/03/vulnerabilities-pa...
x_refsource_MISC

CVSS V3.1

Score:
6.3
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.