Description
WordPress Plugin WP Popup Lite-Responsive popup for WordPress [only if downloaded via the vendor website] contains suspicious code. Attackers can exploit this issue to perform a variety of actions. Successful attacks will compromise the affected application and possibly the webserver or computer. WordPress Plugin WP Popup Lite-Responsive popup for WordPress version 1.0.8 is vulnerable; prior versions may also be affected.
Remediation
Disable and remove the plugin, or download it from wordpress.org repository
References
Related Vulnerabilities
MediaWiki Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2017-8810)
WordPress Plugin Sticky Related Posts Cross-Site Scripting (1.0)
WordPress Plugin Social Media Share Buttons & Social Sharing Icons Security Bypass (1.5.1)