CVE-2022-4124: Popup Manager Project Popup Manager

Medium severity, CVSS 4.3. EPSS: 0.3% chance of exploitation in the next 30 days.

The Popup Manager WordPress plugin through 1.6.6 does not have authorisation and CSRF checks when deleting popups, which could allow unauthenticated users to delete them

Affected products

• Popup Manager Project Popup Manager: up to and including 1.6.6

Published 2022-12-19. Last modified 2026-06-17.