PO
Product
Popup
10
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 4High 1Medium 5Low 0
Watch
Add Popup to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2023-46197 | 6.5 | May 17 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in supsystic.Com Popup by Supsystic allows Relative Path Traversal.This issue affects… Affected: before 1.10.20 |
| CVE-2021-24275 | 6.1 | May 5 | The Popup by Supsystic WordPress plugin before 1.10.5 did not sanitise the tab parameter of its options page before outputting it in an attribute, leading to a reflected… Affected: before 1.10.5 |
| CVE-2022-0424 | 5.3 | May 9 | The Popup by Supsystic WordPress plugin before 1.10.9 does not have any authentication and authorisation in an AJAX action, allowing unauthenticated attackers to call it and get… Affected: before 1.10.9 |
| CVE-2024-31421 | 4.3 | Apr 15 | Missing Authorization vulnerability in supsystic Popup by Supsystic popup-by-supsystic.This issue affects Popup by Supsystic: from n/a through <= 1.10.27 Affected: before 1.10.28 |
| CVE-2017-20065 | 4.3 | Jun 20 | A vulnerability was found in Supsystic Popup Plugin 1.7.6 and classified as problematic Affected: 1.7.6 |
Showing 5