CVE-2020-10195

The popup-builder plugin before 3.64.1 for WordPress allows information disclosure and settings modification, leading to in-scope privilege escalation via admin-post actions to com/classes/Actions.php. By sending a POST request to wp-admin/admin-post.php, an authenticated attacker with minimal (subscriber-level) permissions can modify the plugin's settings to allow arbitrary roles (including subscribers) access to plugin functionality by setting the action parameter to sgpbSaveSettings, export a list of current newsletter subscribers by setting the action parameter to csv_file, or obtain system configuration information including webserver configuration and a list of installed plugins by setting the action parameter to sgpb_system_info.

• CWE-200

• https://wpvulndb.com/vulnerabilities/10127Third Party Advisory
• https://www.wordfence.com/blog/2020/03/vulnerabilities-patched-in-popup-builder-plugin-affecting-over-100000-sites/Exploit, Third Party Advisory
• https://wpvulndb.com/vulnerabilities/10127Third Party Advisory
• https://www.wordfence.com/blog/2020/03/vulnerabilities-patched-in-popup-builder-plugin-affecting-over-100000-sites/Exploit, Third Party Advisory

Published

Mar 13, 2020

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2020-1019An elevation of privilege vulnerability exists in RMS Sharin…7.8
• CVE-2020-10190An issue was discovered in MunkiReport before 5.3.0. An auth…8.8
• CVE-2020-10191An issue was discovered in MunkiReport before 5.3.0. An auth…5.4
• CVE-2020-10192An issue was discovered in Munkireport before 5.3.0.3923. An…6.1
• CVE-2020-10193ESET Archive Support Module before 1294 allows virus-detecti…7.5
• CVE-2020-10194cs/service/account/AutoCompleteGal.java in Zimbra zm-mailbox…6.5
• CVE-2020-10196An XSS vulnerability in the popup-builder plugin before 3.64…6.1
• CVE-2020-10199Sonatype Nexus Repository before 3.21.2 allows JavaEL Inject…8.8
• CVE-2020-1020A remote code execution vulnerability exists in Microsoft Wi…8.8
• CVE-2020-10203Sonatype Nexus Repository before 3.21.2 allows XSS.4.8
• CVE-2020-10204Sonatype Nexus Repository before 3.21.2 allows Remote Code E…7.2
• CVE-2020-10206Use of a Hard-coded Password in VNCserver in Amino Communica…4.4