Description
WordPress Plugin Popup Maker-Popup for opt-ins, lead gen, & more is prone to an information disclosure vulnerability. Attackers can exploit this issue to obtain sensitive information that may help in launching further attacks. WordPress Plugin Popup Maker-Popup for opt-ins, lead gen, & more version 1.8.11 is vulnerable; prior versions may also be affected.
Remediation
Update to plugin version 1.8.13 or latest
References
https://blog.redyops.com/wordpress-plugin-popup-maker/
https://plugins.svn.wordpress.org/popup-maker/trunk/readme.txt
Related Vulnerabilities
MediaWiki Incorrect Authorization Vulnerability (CVE-2021-36132)
WordPress Plugin Another WordPress Classifieds Arbitrary File Upload (3.3.2)
Zope Web Application Server Other Vulnerability (CVE-2001-1227)
Perl Improper Link Resolution Before File Access ('Link Following') Vulnerability (CVE-1999-1386)
Python Improper Input Validation Vulnerability (CVE-2023-24329)