Lucene search
K
Database
Vendors
Products
Timeline
Vulnerabilities
Perimeter Scanner
Scanning
Projects
Scanner
Agent Scanning
API Scanning
Manual Audit
Email
Webhook
Resources
Documents
Blog
Glossary
FAQ
Plugins
Pricing
Contacts
About Us
Partners
Branding Guideline
Settings
Sign in
SupsysticPopup

10 matches found

CVE
CVE•added 2021/05/05 7:15 p.m.•89 views

CVE-2021-24275

The Popup by Supsystic WordPress plugin before 1.10.5 did not sanitise the tab parameter of its options page before outputting it in an attribute, leading to a reflected Cross-Site Scripting issue

6.1CVSS6AI score0.05897EPSS
CVE
CVE•added 2024/05/17 9:15 a.m.•85 views

CVE-2023-46197

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in supsystic.Com Popup by Supsystic allows Relative Path Traversal.This issue affects Popup by Supsystic: from n/a through 1.10.19.

8.8CVSS6.7AI score0.18362EPSS
CVE
CVE•added 2022/05/09 5:15 p.m.•80 views

CVE-2022-0424

The Popup by Supsystic WordPress plugin before 1.10.9 does not have any authentication and authorisation in an AJAX action, allowing unauthenticated attackers to call it and get the email addresses of subscribed users

5.3CVSS5.4AI score0.3481EPSS
CVE
CVE•added 2024/12/09 1:15 p.m.•64 views

CVE-2023-51353

Missing Authorization vulnerability in supsystic.com Popup by Supsystic allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Popup by Supsystic: from n/a through 1.10.19.

9.8CVSS5.4AI score0.0013EPSS
CVE
CVE•added 2024/04/15 11:15 a.m.•59 views

CVE-2024-31421

Missing Authorization vulnerability in Supsystic Popup by Supsystic.This issue affects Popup by Supsystic: from n/a through 1.10.27.

4.3CVSS6.8AI score0.00207EPSS
CVE
CVE•added 2024/11/18 3:15 p.m.•49 views

CVE-2024-52434

Improper Neutralization of Special Elements Used in a Template Engine vulnerability in Supsystic Popup by Supsystic allows Command Injection.This issue affects Popup by Supsystic: from n/a through 1.10.29.

9.1CVSS9.4AI score0.01392EPSS
CVE
CVE•added 2023/07/17 2:15 p.m.•40 views

CVE-2023-3186

The Popup by Supsystic WordPress plugin before 1.10.19 has a prototype pollution vulnerability that could allow an attacker to inject arbitrary properties into Object.prototype.

9.8CVSS9.4AI score0.04992EPSS
CVE
CVE•added 2024/12/13 3:15 p.m.•37 views

CVE-2023-39997

Missing Authorization vulnerability in supsystic.com Popup by Supsystic allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Popup by Supsystic: from n/a through 1.10.19.

9.8CVSS5.4AI score0.00215EPSS
CVE
CVE•added 2019/08/20 3:15 p.m.•32 views

CVE-2016-10915

The popup-by-supsystic plugin before 1.7.9 for WordPress has CSRF.

8.8CVSS8.7AI score0.00109EPSS
CVE
CVE•added 2022/06/20 8:15 p.m.•32 views

CVE-2017-20065

A vulnerability was found in Supsystic Popup Plugin 1.7.6 and classified as problematic. This issue affects some unknown processing. The manipulation leads to cross-site request forgery. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.

4.3CVSS4.6AI score0.00215EPSS