PO
Product
Popup
10
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 4High 1Medium 5Low 0
Watch
Add Popup to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2023-46197 | 6.5 | May 17 | WordPress Popup by Supsystic plugin <= 1.10.19 - Unauthenticated Subscriber Email Addresses Disclosure Affected: before 1.10.20 |
| CVE-2021-24275 | 6.1 | May 5 | The Popup by Supsystic WordPress plugin before 1.10.5 did not sanitise the tab parameter of its options page before outputting it in an attribute, leading to a reflected… Affected: before 1.10.5 |
| CVE-2022-0424 | 5.3 | May 9 | The Popup by Supsystic WordPress plugin before 1.10.9 does not have any authentication and authorisation in an AJAX action, allowing unauthenticated attackers to call it and get… Affected: before 1.10.9 |
| CVE-2024-31421 | 4.3 | Apr 15 | WordPress Popup by Supsystic plugin <= 1.10.27 - Broken Access Control vulnerability Affected: before 1.10.28 |
| CVE-2017-20065 | 4.3 | Jun 20 | Supsystic Popup Plugin cross-site request forgery Affected: 1.7.6 |
Showing 5
