CVE-2023-6696

The Popup Builder – Create highly converting, mobile friendly marketing popups. plugin for WordPress is vulnerable to unauthorized access of functionality due to a missing capability check on several functions in all versions up to, and including, 4.3.1. While some functions contain a nonce check, the nonce can be obtained from the profile page of a logged-in user. This allows subscribers to perform several actions including deleting subscribers and perform blind Server-Side Request Forgery.

• CWE-862
• CWE-862

• https://plugins.trac.wordpress.org/browser/popup-builder/tags/4.2.3/com/classes/Ajax.phpPatch
• https://plugins.trac.wordpress.org/changeset/3096000/popup-builder/trunk/com/classes/Ajax.phpPatch
• https://www.wordfence.com/threat-intel/vulnerabilities/id/9f86ec30-7a9d-4c36-8559-bde331c8b958?source=cvePatch, Third Party Advisory
• https://plugins.trac.wordpress.org/browser/popup-builder/tags/4.2.3/com/classes/Ajax.phpPatch
• https://plugins.trac.wordpress.org/changeset/3096000/popup-builder/trunk/com/classes/Ajax.phpPatch
• https://www.wordfence.com/threat-intel/vulnerabilities/id/9f86ec30-7a9d-4c36-8559-bde331c8b958?source=cvePatch, Third Party Advisory

Published

Jun 15, 2024

Last Modified

Jun 17, 2026

Status

Modified

• Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-6690A race condition in GitHub Enterprise Server allowed an exis…2
• CVE-2023-6691 Cambium ePMP Force 300-25 version 4.7.0.1 is vulnerable to …7.8
• CVE-2023-6692The Ultimate Blocks – WordPress Blocks Plugin plugin for Wor…6.4
• CVE-2023-6693A stack based buffer overflow was found in the virtio-net de…5.3
• CVE-2023-6694The Beaver Themer plugin for WordPress is vulnerable to Stor…5.4
• CVE-2023-6695The Beaver Themer plugin for WordPress is vulnerable to Sens…6.5
• CVE-2023-6697The WP Go Maps (formerly WP Google Maps) plugin for WordPres…6.1
• CVE-2023-6699The WP Compress – Image Optimizer [All-In-One] plugin for Wo…7.5
• CVE-2023-6700The Cookie Information | Free GDPR Consent Solution plugin f…8.8
• CVE-2023-6701The Advanced Custom Fields (ACF) plugin for WordPress is vul…5.4
• CVE-2023-6702Type confusion in V8 in Google Chrome prior to 120.0.6099.10…8.8
• CVE-2023-6703Use after free in Blink in Google Chrome prior to 120.0.6099…8.8