CVE-2025-24746

CVE-2025-24746 is a stored Cross-Site Scripting vulnerability in the WordPress plugin Popup Maker (versions

CVE-2025-24746 WordPress Popup Maker plugin <= 1.20.2 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Daniel Iser Popup Maker popup-maker allows Stored XSS.This issue affects Popup Maker: from n/a through = 1.20.2...

CVE-2025-24746 WordPress Popup Maker plugin <= 1.20.2 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Daniel Iser Popup Maker popup-maker allows Stored XSS.This issue affects Popup Maker: from n/a through = 1.20.2...

CVE-2025-24711 WordPress Popup Box Plugin <= 3.2.4 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in Wow-Company Popup Box popup-box allows Cross Site Request Forgery.This issue affects Popup Box: from n/a through = 3.2.4...

CVE-2025-24711

CVE-2025-24711 is a CSRF vulnerability in Wow-Company Popup Box (Plugin Popup Box) affecting versions up to 3.2.4. The CVSS v3.1 base metrics indicate Network attack vector, Low scope, and Confidentiality/Integrity/Availability impacts (I:L, A:L, C:N) with a base score of 5.4 (Medium) and user in...

WordPress Popup Box Plugin <= 3.2.4 - Cross Site Request Forgery (CSRF) vulnerability

Cross Site Request Forgery CSRF vulnerability discovered by Khang Duong in WordPress Plugin Popup Box versions = 3.2.4...

WordPress Popup Maker plugin <= 1.20.2 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by savphill in WordPress Plugin Popup Maker versions = 1.20.2...

WordPress Email Subscription Popup plugin <= 1.2.23 - SQL Injection vulnerability

SQL Injection vulnerability discovered by Webula in WordPress Plugin Email Subscription Popup versions = 1.2.23...

WordPress plugin Popup Maker 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

PT-2025-5557 · Unknown · Popup Maker

Name of the Vulnerable Software and Affected Versions: Popup Maker versions through 1.20.2 Description: The issue is related to improper neutralization of input during web page generation, which allows for stored cross-site scripting XSS. This means that an attacker can inject malicious scripts...

PT-2025-5424

Name of the Vulnerable Software and Affected Versions I Thirteen Web Solution Email Subscription Popup versions 1.2.23 and earlier Description The issue is related to an Improper Neutralization of Special Elements used in an SQL Command, also known as SQL Injection, which allows Blind SQL...

WordPress plugin Popup Box 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL. WordPress plugin is an application plugin. A cross-site request forge...

PT-2025-5525 · Wow Company · Wow-Company Popup Box

Name of the Vulnerable Software and Affected Versions: Wow-Company Popup Box versions 3.2.4 and earlier Description: The issue is a Cross-Site Request Forgery CSRF vulnerability, which allows an attacker to perform unauthorized actions on a user's account. Recommendations: For versions 3.2.4 and...

CVE-2025-23605

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in lampd Call To Action Popup call-to-action-popup allows Reflected XSS.This issue affects Call To Action Popup: from n/a through = 1.0.2...

CVE-2025-23605 WordPress Call To Action Popup plugin <= 1.0.2 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in lampd Call To Action Popup call-to-action-popup allows Reflected XSS.This issue affects Call To Action Popup: from n/a through = 1.0.2...

CVE-2025-23605 WordPress Call To Action Popup plugin <= 1.0.2 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in lampd Call To Action Popup call-to-action-popup allows Reflected XSS.This issue affects Call To Action Popup: from n/a through = 1.0.2...

PT-2025-4969 · Unknown · Lampd Call To Action Popup

Name of the Vulnerable Software and Affected Versions: LamPD Call To Action Popup versions 1.0.2 and earlier Description: The issue is related to improper neutralization of input during web page generation, also known as Cross-site Scripting, allowing Reflected XSS. This enables potential attacke...

Malicious code in popup-monitor (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bf12287bc6bc8081a72eebd8ef2caea2807d4875c6a3a4f65648d9e61125ef4b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-301 Malicious code in popup-monitor (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bf12287bc6bc8081a72eebd8ef2caea2807d4875c6a3a4f65648d9e61125ef4b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

WordPress Call To Action Popup plugin <= 1.0.2 - Reflected Cross Site Scripting (XSS) vulnerability

Reflected Cross Site Scripting XSS vulnerability discovered by Le Ngoc Anh in WordPress Plugin Call To Action Popup versions = 1.0.2...