CVE-2026-8848 | danieliser Popup Maker Plugin up to 1.22.0 Install Endpoint /connect/info authorization

A vulnerability marked as critical has been reported in danieliser Popup Maker Plugin up to 1.22.0. Affected by this vulnerability is an unknown functionality of the file /connect/info of the component Install Endpoint. Performing a manipulation results in authorization bypass.

This vulnerability is reported as CVE-2026-8848. The attack is possible to be carried out remotely. No exploit exists.VulDB Recent EntriesRead More