published October 14, 2019
⚠️ Here’s a sneaky one! An unauthenticated attacker can partially control certain functions in the Popup Maker plugin for WordPress versions before 1.8.13! Think of it like ordering a customized pizza, but without actually being in the restaurant. The attacker can change the toppings (arguments) of your order (the do_action function) without ever needing to step through the door (authentication). This could allow attackers to manipulate certain settings or delivery methods in your Popup Maker, potentially exposing sensitive information or altering the functionality of your site. While it’s not a full-blown breach, it’s certainly a way in that could compromise user trust and experience!
Think of it like ordering a customized pizza, but without actually being in the restaurant. The attacker can change the toppings (arguments) of your order (the do_action function) without ever needing to step through the door (authentication). The vulnerability arises from a lack of proper authorization checks in the Popup Maker plugin, allowing attackers to control parameters of the do_action function, impacting methods prefixed with popmake_ or pum_. This enables them to influence how the support debug text file (popmake-system-info.txt) is delivered and displayed.
This could allow attackers to manipulate certain settings or delivery methods in your Popup Maker, potentially exposing sensitive information or altering the functionality of your site. While it’s not a full-blown breach, it’s certainly a way in that could compromise user trust and experience! Upgrade the Popup Maker plugin to version 1.8.13 or later to close this vulnerability. Additionally, review your site's access controls to ensure that only authenticated users can modify sensitive settings. Regularly audit your plugins to identify other potential issues! You’ve got this! Update that plugin and tighten your security – a safer site is just around the corner! 🛡️