CVE-2025-26882

creationtimestamp| type| source ---|---|--- 2025-02-25 19:23:57+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/5364...

CVE-2025-26882

CVE-2025-26882 affects Popup Builder (WordPress) up to version 1.1.33. The issue is an stored XSS caused by improper neutralization of input during web page generation, allowing an attacker with contributor-level or higher access to inject scripts in the popup. The vulnerability is authenticated-...