Login Request a demo
WP
Product
WP Popup Builder
by Themehunk · last CVE Oct 27, 2025
4
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities4In the news0Timeline
Severity mix
Critical 1High 0Medium 3Low 0
Severity
All severities4Critical1High0Medium3Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add WP Popup Builder to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2024-9061
9.8
52%
Oct 16
The The WP Popup Builder – Popup Forms and Marketing Lead Generation plugin for WordPress is vulnerable to arbitrary shortcode execution via the wp_ajax_nopriv_shortcode_Api_Add…
Affected: before 1.3.6
CVE-2022-2404
6.1
1%
Sep 26
The WP Popup Builder WordPress plugin before 1.2.9 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting
Affected: before 1.2.9
CVE-2025-62902
5.3
0%
Oct 27
Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in ThemeHunk WP Popup Builder wp-popup-builder allows Retrieve Embedded Sensitive…
Affected: through 1.3.6
CVE-2022-2405
4.3
0%
Sep 26
The WP Popup Builder WordPress plugin before 1.2.9 does not have authorisation and CSRF check in an AJAX action, allowing any authenticated users, such as subscribers to delete…
Affected: before 1.2.9
Showing 4