CVE-2026-112230
UNKNOWN
NVD
CVSS Score
0
Severity
UNKNOWN
Published
Oct 23, 2026
Vendor
unknown
Description
The Popup Builder WordPress plugin before 4.4.6 does not perform authorization checks before trashing popup content in a maintenance routine that runs on unauthenticated requests, allowing unauthenticated attackers to move affected popups into the Trash and overwrite their stored preview data.