CVEs we hold for Popup

Records whose assigning authority named Popup as the affected vendor. Newest identifiers first, capped at 200.

CVE-2025-9856Popup Builder – Create highly converting, mobile friendly marketing popups. <= 4.4.1 - Authenticated (Contributor+)…popupbuilder Popup Builder – Create highly converting…

CVE-2025-15611Popup Box AYS Pro < 5.5.0 - Admin+ Stored Cross-Site Scripting (XSS) via CSRFUnknown Popup Box

CVE-2025-13079Popup Builder - Create highly converting, mobile friendly marketing popups. <= 4.4.2 - Improper Authorization to…popupbuilder Popup Builder – Create highly converting…

CVE-2024-9599Popup Box < 4.7.8 - Admin+ Stored XSSUnknown Popup Box

CVE-2024-9428Popup Builder < 4.3.5 - Admin+ Stored XSSUnknown Popup Builder

CVE-2024-5561Popup Maker < 1.19.1 - Admin+ Stored XSSUnknown Popup Maker

CVE-2024-37096WordPress Popup box plugin <= 4.5.1 - Broken Access Control vulnerabilityPopup box

CVE-2024-3580Popup4Phone <= 1.3.2 - Editor+ Stored XSSUnknown Popup4Phone

CVE-2024-34770WordPress Popup Maker WP plugin <= 1.3.6 - Cross Site Scripting (XSS) vulnerabilityPopup Maker WP

CVE-2024-3477Popup Box < 2.2.7 - Popup Deletion via CSRFUnknown Popup Box

CVE-2024-34367WordPress Popup Box plugin <= 4.1.2 - CSRF to XSS vulnerabilityPopup box

CVE-2024-3236Easy Notify Lite < 1.1.33 - Contributor+ Stored XSSUnknown Popup Builder

CVE-2024-3231Popup4Phone <= 1.3.2 - Unauthenticated Stored XSSUnknown Popup4Phone

CVE-2024-31387WordPress Popup Likebox plugin <= 3.7.2 - Cross-Site Scripting (XSS) vulnerabilityPopup Like box

CVE-2024-2544Popup Builder <= 4.3.0 - Missing Authorization in Multiple AJAX Actionspopupbuilder Popup Builder – Create highly converting…

CVE-2024-2541Popup Builder <= 4.3.6 - Sensitive Information Exposure via Imported Subscribers CSV Filepopupbuilder Popup Builder – Create highly converting…

CVE-2024-2506Popup Builder <= 4.2.7 - Authenticated(Contributor+) Stored Cross-Site Scripting via Custom JSpopupbuilder Popup Builder – Create highly converting…

CVE-2023-6696Popup Builder – Create highly converting, mobile friendly marketing popups <= 4.3.1 - Missing Authorization and Nonce…popupbuilder Popup Builder – Create highly converting…

CVE-2023-6591Popup Box Pro < 20.9.0 - Admin+ Stored XSSUnknown Popup Box

CVE-2023-6294popup-builder < 4.2.6 - Admin+ SSRF & File ReadUnknown Popup Builder

CVE-2023-6000Popup Builder < 4.2.3 - Unauthenticated Stored XSSUnknown Popup Builder

CVE-2023-5874Popup box < 3.8.6 - Admin+ Stored XSS in Popup SettingsUnknown Popup box

CVE-2023-5809Popup box < 3.8.6 - Admin+ Stored XSS in CategoriesUnknown Popup box

CVE-2023-5343Popup Box < 3.7.9 - Admin+ Stored XSSUnknown Popup box

CVE-2023-4390Popup box < 3.7.2 - Admin+ Stored Cross-Site ScriptingUnknown Popup box

CVE-2023-3226Popup Builder < 4.2.0 - Admin+ Stored Cross-Site ScriptingUnknown Popup Builder

CVE-2023-3186Supsystic Popup < 1.10.19 - Prototype PollutionUnknown Popup by Supsystic

CVE-2023-27414WordPress Popup box Plugin <= 3.4.4 is vulnerable to Cross Site Scripting (XSS)Popup box

CVE-2023-0772Popup Builder by OptinMonster < 2.12.2 - Subscriber+ Arbitrary Post Content DisclosureUnknown Popup Builder by OptinMonster

CVE-2022-47597WordPress Popup Maker Plugin <= 1.17.1 is vulnerable to Sensitive Data ExposurePopup for opt-ins, lead gen, & more

CVE-2022-45819WordPress Popup Maker plugin <= 1.17.1 - Broken Access Control vulnerabilityPopup Maker

CVE-2022-4381Popup Maker < 1.16.9 - Contributor+ Stored XSS via Subscription FormUnknown Popup Maker

CVE-2022-4362Popup Maker < 1.16.9 - Contributor+ Stored XSS via ShortcodeUnknown Popup Maker

CVE-2022-4125Popup Manager <= 1.6.6 - Unauthenticated Stored XSSUnknown Popup Manager

CVE-2022-4124Popup Manager <= 1.6.6 - Unauthenticated Arbitrary Popup DeletionUnknown Popup Manager

CVE-2022-3690Popup Maker < 1.16.11 - Contributor+ Stored Cross Site ScriptingUnknown Popup Maker

CVE-2022-2305WordPress Popup <= 1.9.3.8 - Admin+ Stored Cross-Site ScriptingUnknown Popups – WordPress Popup

CVE-2022-2115Popup Anything < 2.1.7 - Reflected Cross-Site ScriptingUnknown Popup Anything – A Marketing Popup and Lead…

CVE-2022-1894Popup Builder < 4.1.11 - Admin+ Stored Cross-Site ScriptingUnknown Popup Builder – Create highly converting, mobile…

CVE-2022-1776Icegram < 2.1.8 - Contributor+ Stored Cross-Site ScriptingUnknown Popups, Welcome Bar, Optins and Lead Generation…

CVE-2022-1104Popup Maker < 1.16.5 - Admin+ Stored Cross-Site ScriptingUnknown Popup Maker – Popup for opt-ins, lead gen, & more

CVE-2022-0641Popup Like box < 3.6.1 - Reflected Cross-Site ScriptingUnknown Popup Like box – Page Plugin

CVE-2022-0479Popup Builder < 4.1.1 - SQL Injection to Reflected Cross-Site ScriptingUnknown Popup Builder – Create highly converting, mobile…

CVE-2022-0424Popup by Supsystic < 1.10.9 - Unauthenticated Subscriber Email Addresses DisclosureUnknown Popup by Supsystic

CVE-2022-0228Popup Builder < 4.0.7 - Admin+ SQL InjectionUnknown Popup Builder – Create highly converting, mobile…

CVE-2022-0214Popup | Custom Popup Builder < 1.3.1 - Unauthenticated Denial of ServiceUnknown Popup | Custom Popup Builder

CVE-2021-25082Popup Builder < 4.0.7 - LFI to RCEUnknown Popup Builder – Create highly converting, mobile…

CVE-2021-24941Icegram < 2.0.5 - Reflected Cross-Site ScriptingUnknown Popups, Welcome Bar, Optins and Lead Generation…

CVE-2021-24883Popup Anything < 2.0.4 - Contributor+ Stored Cross-Site ScriptingUnknown Popup Anything – A Marketing Popup

CVE-2021-24152Popup Builder < 3.74 - Authenticated Reflected Cross-Site Scripting (XSS)Unknown Popup Builder – Responsive WordPress Pop up –…

CVE-2019-25744WordPress Popup Builder 3.49 Persistent Cross-Site ScriptingPopup-Builder Popup Builder

CVE-2017-2284no title heldPopup Maker

52 records, read from the index as it stood on 20 Sep 2026. Every row opens the record it names, and every value on that record opens its own receipt.

Everything on this page is free. Public data. Withholding it protects nothing.