CVE-2022-0214: Custom Popup Builder Project Custom Popup Builder

High severity, CVSS 7.5. EPSS: 1.6% chance of exploitation in the next 30 days.

The Custom Popup Builder WordPress plugin before 1.3.1 autoload data from its popup on every pages, as such data can be sent by unauthenticated user, and is not validated in length, this could cause a denial of service on the blog

Affected products

• Custom Popup Builder Project Custom Popup Builder: before 1.3.1 (fixed in 1.3.1)

Published 2022-02-14. Last modified 2026-06-17.