| Reporter | Title | Published | Views | Family All 11 |
|---|---|---|---|---|
 | WordPress plugin Popup Builder security vulnerability | 17 Jun 202400:00 | – | cnnvd |
 | CVE-2024-3236 Easy Notify Lite < 1.1.33 - Contributor+ Stored XSS | 17 Jun 202406:00 | – | cvelist |
 | CVE-2024-3236 | 17 Jun 202406:15 | – | nvd |
 | CVE-2024-3236 | 17 Jun 202406:15 | – | osv |
 | WordPress Popup Builder Plugin < 1.1.33 is vulnerable to Cross Site Scripting (XSS) | 27 May 202400:00 | – | patchstack |
| WordPress Easy Notify Lite plugin < 1.1.33 - Authenticated Stored XSS vulnerability | 27 May 202412:50 | – | patchstack |
 | CVE-2024-3236 | 23 May 202509:21 | – | redhatcve |
 | CVE-2024-3236 Easy Notify Lite < 1.1.33 - Contributor+ Stored XSS | 17 Jun 202406:00 | – | vulnrichment |
 | Wordfence Intelligence Weekly WordPress Vulnerability Report (May 27, 2024 to June 2, 2024) | 6 Jun 202415:09 | – | wordfence |
 | Easy Notify Lite < 1.1.33 - Contributor+ Stored XSS | 27 May 202400:00 | – | wpexploit |
10
Node
[
{
"vendor": "Unknown",
"product": "Popup Builder",
"versions": [
{
"status": "affected",
"versionType": "semver",
"version": "0",
"lessThan": "1.1.33"
}
],
"defaultStatus": "unaffected"
}
]| Parameter | Position | Path | Description | CWE |
|---|---|---|---|---|
| text_header | request body | wp-admin/post-new.php?post_type=easynotify | Stored XSS vulnerability in Popup Builder WordPress plugin due to insufficient sanitization/escaping of notification fields; payloads placed in notification fields are stored and later rendered, enabling XSS. | CWE-79 |
| main_text | request body | wp-admin/post-new.php?post_type=easynotify | Stored XSS vulnerability in Popup Builder WordPress plugin due to insufficient sanitization/escaping of notification fields; payloads placed in notification fields are stored and later rendered, enabling XSS. | CWE-79 |
| bullet_list | request body | wp-admin/post-new.php?post_type=easynotify | Stored XSS vulnerability in Popup Builder WordPress plugin due to insufficient sanitization/escaping of notification fields; payloads placed in notification fields are stored and later rendered, enabling XSS. | CWE-79 |
Data
Build on a solid foundation with Vulners data
We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data
Api
Power your application with Vulners API
The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access
App
Assess and manage vulnerabilities with Vulners tools
Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation
17 Jun 2026 07:43Current
5.4Medium risk
Vulners AI Score5.4
CVSS 3.15.4
EPSS0.00312
SSVC