Skip to content
OpenAdvisories
Medium · 4.3 CVE-2022-38077 EUVD-2022-40680GHSA-59v2-929c-ff97

WordPress Popup Anything Plugin <= 2.2.1 is vulnerable to Cross Site Request Forgery (CSRF)

Published Mar 29, 2023 · Updated Apr 28, 2026 · Assigned by Patchstack

Vendor: WP OnlineSupport, Essential Plugin Product: Popup Anything – A Marketing Popup and Lead Generation Conversions

Description

Cross-Site Request Forgery (CSRF) vulnerability in WP OnlineSupport, Essential Plugin Popup Anything – A Marketing Popup and Lead Generation Conversions plugin <= 2.2.1 versions.

Affected products

VendorProductAffectedFixed
WP OnlineSupport, Essential Plugin Popup Anything – A Marketing Popup and Lead Generation Conversions ≤ 2.2.1 —

References