cve.bz

CVE-2022-0214

7.5 highEPSS 1.6%

High (7.5) in custom popup builder project custom popup builder. EPSS 1.6% chance of exploitation in the next 30 days.

The Custom Popup Builder WordPress plugin before 1.3.1 autoload data from its popup on every pages, as such data can be sent by unauthenticated user, and is not validated in length, this could cause a denial of service on the blog

Severity

CVSS 3.1

7.5 high
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
EPSS
1.6% chance of exploitation in the next 30 days; higher than 75% of CVEs (scores of 2026-10-31)
CWE
CWE-1284
Published
Modified
Record from
the NVD, synced

Affected

References

Check your stackJSON