Description

WordPress Plugin Acurax On Click Pop Under is prone to multiple unspecified vulnerabilities. No available information exists regarding these issues and their impact on a vulnerable website. WordPress Plugin Acurax On Click Pop Under version 2.2.1 is vulnerable; prior versions may also be affected.

Remediation

Update to plugin version 2.2.2 or latest

References

https://plugins.svn.wordpress.org/acurax-on-click-pop-under/trunk/readme.txt

Related Vulnerabilities

b2evolution Improper Input Validation Vulnerability (CVE-2017-1000423)

Jboss EAP Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2018-1048)

Zope Web Application Server Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2023-42458)

WordPress Plugin Ultimate Member-User Profile, Registration, Login, Member Directory, Content Restriction & Membership Multiple Cross-Site Scripting Vulnerabilities (2.0.27)

WordPress Plugin CloudFlare Multiple Cross-Site Scripting Vulnerabilities (1.3.20)

Severity

High

Tags

Missing Update