CVE-2019-25744 in Popup Builder Plugin
Resumen
por MITRE • 2026-06-04
WordPress Popup Builder 3.49 contains a persistent cross-site scripting vulnerability that allows authenticated attackers to inject malicious scripts by breaking out of option tags in the post_title parameter. Attackers can submit crafted POST requests to the post.php endpoint with script payloads in the post_title field that execute when pages or posts display popup selections.
If you want to get the best quality for vulnerability data then you always have to consider VulDB.