Vulnerability Details CVE-2022-0214
The Custom Popup Builder WordPress plugin before 1.3.1 autoload data from its popup on every pages, as such data can be sent by unauthenticated user, and is not validated in length, this could cause a denial of service on the blog
Exploit prediction scoring system (EPSS) score
EPSS Score 0.015
EPSS Ranking 80.5%
CVSS Severity
CVSS v3 Score 7.5
CVSS v2 Score 5.0
References
Products affected by CVE-2022-0214
-
cpe:2.3:a:custom_popup_builder_project:custom_popup_builder:-
-
cpe:2.3:a:custom_popup_builder_project:custom_popup_builder:0.5
-
cpe:2.3:a:custom_popup_builder_project:custom_popup_builder:0.6
-
cpe:2.3:a:custom_popup_builder_project:custom_popup_builder:0.7
-
cpe:2.3:a:custom_popup_builder_project:custom_popup_builder:0.8
-
cpe:2.3:a:custom_popup_builder_project:custom_popup_builder:1.0