Login Request a demo
PB
Product
Popup box
by Ays Pro · last CVE Jun 26, 2026
16
CVEs
0
On KEV
8.8
Max CVSS
0
New 30D
Vulnerabilities16In the news0Timeline
Severity mix
Critical 0High 4Medium 12Low 0
Severity
All severities16Critical0High4Medium12Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Popup box to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2021-24460
8.8
1%
Aug 2
Popup Like box - Page Plugin < 3.5.3 - Authenticated Blind SQL Injections
Affected: before 3.5.3
CVE-2021-24458
8.8
1%
Aug 2
Popup box < 2.3.4 - Authenticated Blind SQL Injections
Affected: 2.3.4 before 2.3.4
CVE-2026-57631
7.6
0%
Jun 26
WordPress Popup box plugin <= 6.0.1 - SQL Injection vulnerability
Affected: through 6.0.1
CVE-2026-54192
7.1
0%
Jun 17
WordPress Popup box plugin <= 6.2.9 - Reflected Cross Site Scripting (XSS) vulnerability
Affected: through 6.2.9
CVE-2023-27414
6.1
0%
Jun 21
WordPress Popup box Plugin <= 3.4.4 is vulnerable to Cross Site Scripting (XSS)
Affected: before 3.4.5
CVE-2025-15611
5.4
0%
Apr 7
Popup Box AYS Pro < 5.5.0 - Admin+ Stored Cross-Site Scripting (XSS) via CSRF
Affected: before 5.5.0
CVE-2025-69021
5.4
0%
Dec 30
WordPress Popup box plugin <= 6.0.7 - Cross Site Request Forgery (CSRF) vulnerability
Affected: through 6.0.7
CVE-2024-9599
5.4
0%
May 15
Popup Box < 4.7.8 - Admin+ Stored XSS
Affected: before 4.7.8
CVE-2025-57931
5.3
0%
Oct 29
WordPress Popup box plugin <= 5.5.4 - Cross Site Request Forgery (CSRF) vulnerability
Affected: through 5.5.4
CVE-2024-10861
5.3
0%
Nov 16
Popup Box – Create Countdown, Coupon, Video, Contact Form Popups <= 4.9.7 - Missing Authorization to Unauthenticated Limited Options Update
Affected: through 4.9.7
CVE-2024-3897
5.3
1%
May 2
Popup Box – Best WordPress Popup Plugin <= 4.3.6 - Missing Authorization to Information Exposure
Affected: through 4.3.6
CVE-2023-6591
4.8
0%
Feb 12
Popup Box Pro < 20.9.0 - Admin+ Stored XSS
Affected: before 20.9.0
CVE-2023-5809
4.8
0%
Dec 4
Popup box < 3.8.6 - Admin+ Stored XSS in Categories
Affected: before 3.8.6
CVE-2023-5874
4.8
0%
Dec 4
Popup box < 3.8.6 - Admin+ Stored XSS in Popup Settings
Affected: before 3.8.6
CVE-2023-5343
4.8
0%
Nov 20
Popup Box < 3.7.9 - Admin+ Stored XSS
Affected: before 3.7.9
CVE-2023-4390
4.8
0%
Oct 31
Popup box < 3.7.2 - Admin+ Stored Cross-Site Scripting
Affected: before 3.7.2
Showing 16