Popup builder with Gamification, Multi-Step Popups, Page-Level Targeting, and WooCommerce Triggers vulnerabilities

Product

Popup builder with Gamification, Multi-Step Popups, Page-Level Targeting, and WooCommerce Triggers

by roxnor · last CVE Feb 10, 2026

CVEs

On KEV

8.2

Max CVSS

New 30D

Vulnerabilities5 In the news0 Timeline

Severity mix

Critical 0High 3Medium 2Low 0

Severity

All severities5 Critical0 High3 Medium2 Low0

Exploitation

On CISA KEV0 Exploited in the wild0

Watch

Add Popup builder with Gamification, Multi-Step Popups, Page-Level Targeting, and WooCommerce Triggers to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2025-14895	5.4	0%	Feb 10	PopupKit <= 2.2.0 - Missing Authorization to Sensitive Information Disclosure and Data Deletion Affected: through 2.2.0
CVE-2025-14441	4.3	0%	Jan 6	Popupkit <= 2.2.0 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Subscriber Data Deletion Affected: through 2.2.0