Wp Popups@* Security Vulnerabilities and Issues — Wp Popups@* CVE List

Lucene search

TimersysWp Popups*

3 matches found

CVE•added 2023/01/23 3:15 p.m.•47 views

CVE-2022-4716

The WP Popups WordPress plugin before 2.1.4.8 does not validate and escape some of its shortcode attributes before outputting them back in the page, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attacks which could be used against high privilege us...

5.4CVSS5.3AI score0.00113EPSS

CVE•added 2023/05/08 2:15 p.m.•39 views

CVE-2023-1905

The WP Popups WordPress plugin before 2.1.5.1 does not properly escape the href attribute of its spu-facebook-page shortcode before outputting it back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting atta...

5.4CVSS5.4AI score0.00103EPSS

CVE•added 2023/04/06 9:15 a.m.•36 views

CVE-2023-24003

Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in Timersys WP Popups – WordPress Popup plugin

6.5CVSS5.2AI score0.00077EPSS