CVE-2023-0772 Popup Builder by OptinMonster < 2.12.2 - Subscriber+ Arbitrary Post Content Disclosure
Authenticated subscribers can retrieve content from arbitrary posts, including drafts and private posts, due to missing authorization checks in the Popup Builder plugin.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2023-0772?
CVE-2023-0772 is a medium-severity missing authorization vulnerability in Unknown Popup Builder by OptinMonster, published on 13 Mar 2023. Any signed-in user can exploit it over the network, with no action from the victim.
Official description
The Popup Builder by OptinMonster WordPress plugin before 2.12.2 does not ensure that the campaign to be loaded via some shortcodes is actually a campaign, allowing any authenticated users such as subscriber to retrieve the content of arbitrary posts, like draft, private or even password protected ones.
Which versions are affected by CVE-2023-0772?
It affects 1 product.
Products include Optinmonster Optinmonster.
How do I fix CVE-2023-0772?
No fix has been published for CVE-2023-0772 yet. Limit exposure of the affected software until one is available.
Upgrade, and check permissions on every request on the server, not only in the interface. More about Missing authorization.
Is CVE-2023-0772 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2023-0772 exists.
Other vulnerabilities in Unknown Popup Builder by OptinMonster
- CVE-2021-39341 OptinMonster <= 2.6.4 Unprotected REST-API Endpoints
- CVE-2024-4045 Cross-site scripting in Popup Builder & Popup Maker for WordPress – OptinMonster Email Marketing and Lead Generation
- CVE-2021-39325 OptinMonster <= 2.6.0 Reflected Cross-Site Scripting
- CVE-2016-10996 Missing authorization in n/a
Sources
Also known as GHSA-w5vw-x33c-r8g6.