Authorization Bypass in Popup Maker WP Plugin

Executive Summary

The Popup Maker WP WordPress plugin through version 1.4.5 has a missing authorization issue. It allows low-privileged users like Subscribers to store display-targeting values that are later executed as zero-argument PHP callables during public page loads. This can lead to sensitive information disclosure and denial of service.

Useful 0 Not Useful 0

Detection Guidance

Check if the Popup Maker WP plugin version is between 1.2.2.1 and 1.4.5. Use commands like 'wp plugin list' in WordPress CLI or inspect the plugin files for version details. Look for unauthorized access attempts by low-privileged users like Subscribers in server logs.

Useful 0 Not Useful 0

Impact Analysis

This vulnerability can allow unauthorized users to access sensitive information or disrupt services. An attacker with a low-privileged role could exploit this to read sensitive data or cause the website to crash by executing malicious PHP code.

Useful 0 Not Useful 0

Compliance Impact

This vulnerability could lead to non-compliance with GDPR or HIPAA by exposing sensitive user data. GDPR requires protecting personal data, and HIPAA mandates safeguarding health information. A breach could result in legal penalties and reputational damage.

Useful 0 Not Useful 0

Mitigation Strategies

Update the Popup Maker WP plugin to the latest version immediately. If an update is not available, consider disabling the plugin temporarily. Restrict user roles to prevent low-privileged users from accessing sensitive plugin functions.

Useful 0 Not Useful 0