security.nuyts.tech
CVE-2022-0424 – NuytsTech Security
The Popup by Supsystic WordPress plugin before 1.10.9 does not have any authentication and authorisation in an AJAX action, allowing unauthenticated attackers t