Login Request a demo
LP
Product
Login/Signup Popup
by xootix · last CVE Jun 20, 2025
6
CVEs
0
On KEV
8.8
Max CVSS
0
New 30D
Vulnerabilities6In the news0Timeline
Severity mix
Critical 0High 2Medium 4Low 0
Severity
All severities6Critical0High2Medium4Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Login/Signup Popup to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2024-5324
8.8
2%
Jun 6
XootiX Framework <= Various Plugin Versions - Missing Authorization to Arbitrary Options Update
Affected: 2.7.1; 2.7.2
CVE-2022-0215
8.8
1%
Jan 18
The Login/Signup Popup, Waitlist Woocommerce ( Back in stock notifier ), and Side Cart Woocommerce (Ajax) WordPress plugins by XootiX are vulnerable to Cross-Site Request Forgery…
Affected: through 2.2
CVE-2025-50027
5.9
0%
Jun 20
WordPress Login/Signup Popup plugin <= 2.9.4 - Cross Site Scripting (XSS) Vulnerability
Affected: through 2.9.4
CVE-2025-1064
5.4
0%
Feb 20
Login/Signup Popup ( Inline Form + Woocommerce ) <= 2.8.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via xoo_el_action Shortcode
Affected: before 2.8.6
CVE-2020-36715
4.6
1%
Jun 7
The Login/Signup Popup plugin for WordPress is vulnerable to authorization bypass due to missing capability checks on several functions in versions up to, and including, 1.4
Affected: through 1.4
CVE-2024-5665
4.3
0%
Jun 6
Login/Signup Popup ( Inline Form + Woocommerce ) 2.7.1 - 2.7.2 - Missing Authorization to Arbitrary Options Exposure
Affected: 2.7.1 before 2.7.3
Showing 6