Skip to content
OpenAdvisories
Medium · 5.4 Scanner template CVE-2022-29495 EUVD-2022-33833GHSA-hh6r-56fp-6x7j

WordPress Popup Builder plugin <= 4.1.11 - Cross-Site Request Forgery (CSRF) leading to plugin settings update

Published Jul 22, 2022 · Updated Apr 28, 2026 · Assigned by Patchstack

Description

Cross-Site Request Forgery (CSRF) vulnerability in Sygnoos Popup Builder plugin <= 4.1.11 at WordPress allows an attacker to update plugin settings.

Affected products

VendorProductAffectedFixed
Sygnoos Popup Builder (WordPress plugin) <= 4.1.11 – ≤ 4.1.11 —

Automated scanner template

A ready-made Nuclei template detects this vulnerability automatically. Vulnerabilities with public scanner templates are typically probed across the internet soon after the template appears — exposed systems should be patched first.

Source: projectdiscovery/nuclei-templates (MIT) — updated daily. Only links are listed.

References