WordPress Popup by Supsystic Plugin <= 1.10.27 is vulnerable to Broken Access Control

Software Popup by Supsystic Type Plugin Vulnerable versions = 1.10.27 Fixed in 1.10.28 OWASP Top 10 A1: Broken Access Control Classification Broken Access Control CVE CVE-2024-31421 Patch priority Low CVSS severity Low 4.3 Developer Supsystic PSID 5734d7bec770 Credits Steven Julian Required...

WordPress Popup Like box Plugin <= 3.7.2 is vulnerable to Cross Site Scripting (XSS)

Software Popup Like box Type Plugin Vulnerable versions = 3.7.2 Fixed in 3.7.3 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-31387 Patch priority Low CVSS severity Low 5.9 Developer Claim ownership PSID a507657bf13d Credits Cronus Required privilege Administrator...

WordPress Popup Builder Plugin <= 4.2.6 is vulnerable to Cross Site Scripting (XSS)

Software Popup Builder Type Plugin Vulnerable versions = 4.2.6 Fixed in 4.2.7 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-30184 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID be71da5ede09 Credits LVT-tholv2k Required privilege Contribut...

WordPress Popup Maker Plugin <= 1.18.2 is vulnerable to Cross Site Scripting (XSS)

Software Popup Maker Type Plugin Vulnerable versions = 1.18.2 Fixed in 1.18.3 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-2336 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID f2e61eb496fe Credits Tim Coen Required privileg...

WordPress Popup by Supsystic Plugin <= 1.10.19 is vulnerable to Broken Access Control

Software Popup by Supsystic Type Plugin Vulnerable versions = 1.10.19 Fixed in 1.10.20 OWASP Top 10 A1: Broken Access Control Classification Broken Access Control CVE CVE-2023-51353 Patch priority Medium CVSS severity Medium 5.3 Developer Supsystic PSID eb9cfbfe68fb Credits Abdi Pranata Required...

WordPress Popup Builder Plugin < 4.2.3 is vulnerable to Cross Site Scripting (XSS)

Software Popup Builder Type Plugin Vulnerable versions 4.2.3 Fixed in 4.2.3 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-6000 Patch priority High CVSS severity High 7.1 Developer Claim ownership PSID 14212aacf7f9 Credits Marc Montpas Required...

WordPress plugin Popup box security vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed using the PHP language, which supports personal blog sites on PHP and MySQL servers.WordPress plugin is an...

WordPress Popup Anything Plugin <= 2.7 is vulnerable to Broken Access Control

Software Popup Anything Type Plugin Vulnerable versions = 2.7 Fixed in 2.8 OWASP Top 10 A1: Broken Access Control Classification Broken Access Control CVE CVE-2023-40200 Patch priority Medium CVSS severity Medium 5.3 Developer Claim ownership PSID 4b0a6b545433 Credits Abdi Pranata Required...

WordPress Popup by Supsystic Plugin <= 1.10.19 is vulnerable to Arbitrary File Download

Software Popup by Supsystic Type Plugin Vulnerable versions = 1.10.19 Fixed in 1.10.20 OWASP Top 10 A1: Broken Access Control Classification Arbitrary File Download CVE CVE-2023-46197 Patch priority Low CVSS severity Low 5.3 Developer Supsystic PSID deb6d3a6f13c Credits Rafshanzani Suhada Require...

WordPress Popup contact form Plugin <= 7.1 is vulnerable to Cross Site Scripting (XSS)

Software Popup contact form Type Plugin Vulnerable versions = 7.1 Fixed in N/A OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-44230 Patch priority Low CVSS severity Low 5.9 Developer Claim ownership PSID afa619d1379b Credits yuyudhn Required privile...

WordPress Popup Builder Plugin < 4.2.2 is vulnerable to Cross Site Scripting (XSS)

Software Popup Builder Type Plugin Vulnerable versions 4.2.2 Fixed in 4.2.2 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-3226 Patch priority Low CVSS severity Low 5.9 Developer Claim ownership PSID 3861c79d8ad1 Credits Dipak Panchal th3.d1pak...

WordPress Popup by Supsystic Plugin <= 1.10.19 is vulnerable to Broken Access Control

Software Popup by Supsystic Type Plugin Vulnerable versions = 1.10.19 Fixed in 1.10.20 OWASP Top 10 A1: Broken Access Control Classification Broken Access Control CVE CVE-2023-39997 Patch priority Low CVSS severity Low 5.3 Developer Supsystic PSID 6f37d18ff2b4 Credits Rafshanzani Suhada Required...

WordPress Popup Maker Plugin <= 1.9.2 is vulnerable to Cross Site Scripting (XSS)

Software Popup Maker Type Plugin Vulnerable versions = 1.9.2 Fixed in 1.10.0 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-33999 Patch priority High CVSS severity High 7.1 Developer Claim ownership PSID b1490f38ddc0 Credits Rafie Muhammad Patchstack Required...

WordPress Popup by Supsystic Plugin < 1.10.19 is vulnerable to Other Vulnerability Type

Software Popup by Supsystic Type Plugin Vulnerable versions 1.10.19 Fixed in 1.10.19 OWASP Top 10 A1: Injection Classification Other Vulnerability Type CVE CVE-2023-3186 Patch priority Low CVSS severity Low 7.1 Developer Supsystic PSID 8e2256424582 Credits drwtsn Required privilege Unauthenticate...

Cross site scripting

Auth. contributor+ Stored Cross-Site Scripting XSS vulnerability in Timersys WP Popups – WordPress Popup plugin = 2.1.4.8 versions...

CVE-2023-24003 WordPress WP Popups Plugin <= 2.1.4.8 is vulnerable to Cross Site Scripting (XSS)

Auth. contributor+ Stored Cross-Site Scripting XSS vulnerability in Timersys WP Popups – WordPress Popup plugin = 2.1.4.8 versions...

WordPress Popup Maker Plugin <= 1.17.1 is vulnerable to Sensitive Data Exposure

Software Popup Maker Type Plugin Vulnerable versions = 1.17.1 Fixed in 1.18.0 OWASP Top 10 A3: Sensitive Data Exposure Classification Sensitive Data Exposure CVE CVE-2022-47597 Patch priority Low CVSS severity Low 5.3 Developer Claim ownership PSID d6552fe3bb39 Credits rezaduty Required privilege...

WordPress Popup Maker Plugin <= 1.17.1 is vulnerable to Broken Access Control

Software Popup Maker Type Plugin Vulnerable versions = 1.17.1 Fixed in 1.18.0 OWASP Top 10 A5: Broken Access Control Classification Broken Access Control CVE CVE-2022-45819 Patch priority Low CVSS severity Low 3.5 Developer Claim ownership PSID 88c15bfdb17a Credits István Márton Required privileg...

WordPress Popup Maker Plugin <= 1.18.0 is vulnerable to Cross Site Request Forgery (CSRF)

Software Popup Maker Type Plugin Vulnerable versions = 1.18.0 Fixed in 1.18.1 OWASP Top 10 A5: Broken Access Control Classification Cross Site Request Forgery CSRF CVE N/A Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID 5a3eb6eb73f2 Credits Unknown Required privilege...

WordPress Popup box Plugin <= 3.4.4 is vulnerable to Cross Site Scripting (XSS)

Software Popup box Type Plugin Vulnerable versions = 3.4.4 Fixed in 3.4.5 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-27414 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 356c29098000 Credits Nguyen Xuan Chien...