CVE-2026-89270 - Popup Builder <= 4.4.5 - Missing Authorization to Unauthenticated Arbitrary Popup Post Trashing via 'post_type' and 'sg_popup_preview_id' Parameters
CVE ID :CVE-2026-89270 Published : Oct. 31, 2026, 7:16 a.m. | 44 minutes ago Description :The Popup Builder – Create highly converting, mobile friendly marketing popups. plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 4.4.5 This is due to the...