Muneeb Custom Popup Builder (WordPress plugin) vulnerabilities

Latest Muneeb Custom Popup Builder (WordPress plugin) CVEs

Newest publication first

1. CVE-2022-28612 WordPress Custom Popup Builder plugin <= 1.3.1 - Improper Access Control vulnerability leading to multiple Authenticated Stored XSS

   Published 2022-06-15

   Medium·CVSS 5.4 EPSS 0.50%

   Improper Access Control vulnerability leading to multiple Authenticated (contributor or higher user role) Stored Cross-Site Scripting (XSS) vulnerabilities in Muneeb's Custom Popup Builder plugin <= 1.3.1 at WordPress.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.