Popup Builder、未認証で全ポップアップを削除される脆弱性
Summary
WordPressのプラグインPopup Builderの4.4.5以下に、認証なしで公開中のポップアップを全件ゴミ箱へ送れる脆弱性が公表されました。該当する版を使うサイトは、修正版の有無を確認して更新し、できなければ無効化します。
AI summary
Produced by SecPulse using an external AI model; it may contain mistakes. Check the original description and references below before acting on it.
WordPressのプラグインPopup Builderの4.4.5以下に、認証なしで公開中のポップアップを全件ゴミ箱へ送れる脆弱性が公表されました。該当する版を使うサイトは、修正版の有無を確認して更新し、できなければ無効化します。
Affected packages
| Ecosystem | Package | Affected | Fixed |
|---|---|---|---|
| popupbuilder | Popup Builder – Create highly converting, mobile friendly marketing popups. |
≤ 4.4.5 |
— |
Original description The description as published by the source.
The Popup Builder – Create highly converting, mobile friendly marketing popups. plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 4.4.5 This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for unauthenticated attackers to trash all published popups on the site with a single unauthenticated GET request. The attack is amplified by a second flaw in SGPopup::find(), which returns false for every normally published popup when the sg_popup_preview_id parameter is present, causing the trash branch to fire against every popup on the site simultaneously.
Source: CVE.org (CVE Program・cvelistV5) NVD GitHub Advisory
References
- web security@wordfence.com
- web security@wordfence.com
- web security@wordfence.com
- web security@wordfence.com
- web security@wordfence.com
- web security@wordfence.com
- web security@wordfence.com
- web security@wordfence.com
- web nvd.nist.gov
- web wordpress.org
- web github.com