https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-10-24T06:09:21.779327+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/cve-2026-112230 CVE-2026-112230 — Popup Builder < 4.4.6 - Unauthenticated Popup Trashing via post_type Parameter 2026-10-24T06:09:21.780027+00:00

Affected: Unknown Popup Builder

The Popup Builder WordPress plugin before 4.4.6 does not perform authorization checks before trashing popup content in a maintenance routine that runs on unauthenticated requests, allowing unauthenticated attackers to move affected popups into the Trash and overwrite their stored preview data.