CVE-2026-1165 | ays-pro Popup Box Plugin up to 6.1.1 on WordPress publish_unpublish_popupbox cross-site request forgery

A vulnerability classified as problematic has been found in ays-pro Popup Box Plugin up to 6.1.1 on WordPress. Affected by this vulnerability is the function publish_unpublish_popupbox. Performing a manipulation results in cross-site request forgery.

This vulnerability is cataloged as CVE-2026-1165. It is possible to initiate the attack remotely. There is no exploit available.