VulnCheck KEV: CVE-2026-18322

The Smart Popup by Supsystic plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 1.12.0. This is due to a permission map collision in the havePermissions function in classes/frame.php, where arraymerge overwrites the popup module's...

PT-2026-67946

Name of the Vulnerable Software and Affected Versions Smart Popup by Supsystystic versions prior to 1.12.1 Description A privilege escalation issue exists due to a permission map collision in the havePermissions function within classes/frame.php. The use of array merge overwrites the...