CVE-2023-0733
CVSS 3.1 Score 6.1 of 10 (medium)
Details
Published May 30, 2023
Updated: Jan 10, 2025
Summary
CVE-2023-0733 is a vulnerability affecting the Newsletter Popup plugin for WordPress. This issue allows unauthenticated users to execute Stored Cross-Site Scripting attacks due to the plugin's failure to sanitize and escape certain settings. An attacker can inject malicious code into the plugin, which is then stored and executed whenever the popup is displayed, potentially leading to unauthorized access or data theft. Users are advised to update the plugin to the latest version as soon as possible to mitigate this risk.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.