Popup Maker Security Vulnerabilities and Issues — Popup Maker CVE List

Lucene search

Code-atlanticPopup Maker

4 matches found

CVE•added 2022/11/21 11:15 a.m.•69 views

CVE-2022-3690

The Popup Maker WordPress plugin before 1.16.11 does not sanitise and escape some of its Popup options, which could allow users with a role as low as Contributor to perform Stored Cross-Site Scripting attacks, which could be used against admins

5.5CVSS4.8AI score0.00207EPSS

CVE•added 2023/01/02 10:15 p.m.•56 views

CVE-2022-4381

The Popup Maker WordPress plugin before 1.16.9 does not validate and escape one of its shortcode attributes, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attacks

5.4CVSS5.2AI score0.00144EPSS

CVE•added 2023/01/02 10:15 p.m.•52 views

CVE-2022-4362

5.4CVSS5.2AI score0.00252EPSS

CVE•added 2024/12/12 7:15 a.m.•49 views

CVE-2024-10583

The Popup Maker – Boost Sales, Conversions, Optins, Subscribers with the Ultimate WP Popups Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘post_title’ parameter in all versions up to, and including, 1.20.2 due to insufficient input sanitization and output escapin...

5.4CVSS5.1AI score0.00012EPSS