Popup Box – Create Countdown, Coupon, Video, Contact Form Popups vulnerabilities

Product

Popup Box – Create Countdown, Coupon, Video, Contact Form Popups

by ays-pro · last CVE Oct 16, 2026

CVEs

On KEV

5.3

Max CVSS

New 30D

Severity mix

Critical 0High 0Medium 4Low 0

Severity

Exploitation

Watch

Add Popup Box – Create Countdown, Coupon, Video, Contact Form Popups to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2024-10861	5.3	0%	Nov 16	Popup Box – Create Countdown, Coupon, Video, Contact Form Popups <= 4.9.7 - Missing Authorization to Unauthenticated Limited Options Update Affected: through 4.9.7
CVE-2024-3897	5.3	1%	May 2	Popup Box – Best WordPress Popup Plugin <= 4.3.6 - Missing Authorization to Information Exposure Affected: through 4.3.6
CVE-2026-100159	4.8	0%	Oct 16	Popup Box 6.4.1 - 6.4.2 - Unauthenticated Arbitrary Shortcode Execution via Client-IP / X-Forwarded-For HTTP Headers Affected: 6.4.1 through 6.4.2
CVE-2026-1165	4.3	0%	Jan 31	Popup Box <= 6.1.1 - Cross-Site Request Forgery to Popup Status Change Affected: through 6.1.1