Medium · 5.4 CVE-2022-32289 EUVD-2022-53482GHSA-c49p-rhwp-gjx6

WordPress Popup Builder plugin <= 4.1.0 - Cross-Site Request Forgery (CSRF) vulnerability leading to Popup Status Change

Published Jul 21, 2022 · Updated Apr 28, 2026 · Assigned by Patchstack

Description

Cross-Site Request Forgery (CSRF) vulnerability in Sygnoos Popup Builder plugin <= 4.1.0 at WordPress leading to popup status change.

Vendor	Product	Affected	Fixed
Sygnoos	Popup Builder (WordPress plugin)	<= 4.1.0 – ≤ 4.1.0	—