← Back

Promolayer

promolayer

1 CVE • 1 product

Products (1)

Click to collapse
Toggle
Popup Builder
popup_builder

CVEs (1)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
1Promolayer
1Popup Builder
Jun 17, 2026
Jun 20, 2024
N/A· v4
4.3 MEDIUM· v3
N/A· v2
The Pop ups, Exit intent popups, email popups, banners, bars, countdowns and cart savers – Promolayer plugin for WordPress is vulnerable to unauthorized plugin settings update due to a missing capability check on the dis...Show more
The Pop ups, Exit intent popups, email popups, banners, bars, countdowns and cart savers – Promolayer plugin for WordPress is vulnerable to unauthorized plugin settings update due to a missing capability check on the disconnect_promolayer function in all versions up to, and including, 1.1.0. This makes it possible for authenticated attackers, with subscriber access or higher, to remove the Promolayer connection.Show less