CVE-2024-3897: Popup Box – Best WordPress Popup Plugin <= 4.3.6 - Missing Authorization to Information Exposure
ays-pro · Popup Box – Create Countdown, Coupon, Video, Contact Form Popups
Affected: ays-pro Popup Box – Create Countdown, Coupon, Video, Contact Form Popups · Exploitation: unlikely (under 1%)
Not in CyberSIXT coverage yet: no article names this CVE. This page shows the public record.
Higher than 50% of scored CVEs
DescriptionCVE.org
The Popup Box – Best WordPress Popup Plugin plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the ays_pb_create_author AJAX action in all versions up to, and including, 4.3.6. This makes it possible for unauthenticated attackers to enumerate all emails registered on the website.
Affected products1
From the CVE record. A product or version that is not listed is unknown, not unaffected.
- ays-pro · Popup Box – Create Countdown, Coupon, Video, Contact Form Popupsup to and including 4.3.6
On the Atlas
Every published CVE is on the CyberSIXT Atlas, grouped by weakness, vendor and month.
CoverageNo articles yet
No CyberSIXT article names CVE-2024-3897 yet, so there is no coverage timeline, action brief or change log for it. Everything on this page comes from the public CVE record, CISA KEV, EPSS and the nuclei template index. Search the archive or see the CVEs in the news.