CVE-2026-73380

creationtimestamp| type| source ---|---|--- 2026-08-18 16:10:20+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mtem4z5fb52p 2026-08-18 17:10:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mtephu7fso24...

CVE-2026-73380

Unauthenticated PHP Object Injection in Popup by Supsystic = 1.13.0 versions...

CVE-2026-73380

CVE-2026-73380 is an unauthenticated PHP Object Injection vulnerability in the WordPress plugin Popup by Supsystic , affecting versions ≤ 1.13.0 . The vulnerability was discovered by Asim Alshaya and rated CVSS 9.8 (Critical) with a vector of AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H, indicating full c...