0X9567B

**Name of the Vulnerable Software and Affected Versions** The Popup More Popups, Lightboxes, and more popup modules plugin for WordPress version 2.1.6 **Description** The issue allows authenticated attackers with administrator-level access and above to include and execute arbitrary files ending with "Form.php" on the server via the `ycfChangeElementData()` function. This enables the execution of any PHP code in those files, which can be used to bypass access controls, obtain sensitive data, or achieve code execution in cases where images and other “safe” file types can be uploaded and included. **Recommendations** For version 2.1.6, consider disabling the `ycfChangeElementData()` function until a patch is available to prevent the inclusion and execution of arbitrary files. Restrict access to files ending with "Form.php" to minimize the risk of exploitation. Avoid uploading files that could be used to execute PHP code, especially in cases where "safe" file types are allowed. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Email Subscription Popup plugin for WordPress versions up to, and including, 1.2.18 **Description** The issue is related to Reflected Cross-Site Scripting via the `HTTP REFERER` header due to insufficient input sanitization and output escaping. This allows unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link. **Recommendations** For versions up to, and including, 1.2.18, update to a version that addresses the insufficient input sanitization and output escaping issue. As a temporary workaround, consider restricting access to the plugin's functionality to minimize the risk of exploitation.