WP
Product
WP Popup Builder
4
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 1High 0Medium 3Low 0
Watch
Add WP Popup Builder to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2022-2404 | 6.1 | Sep 26 | The WP Popup Builder WordPress plugin before 1.2.9 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting Affected: before 1.2.9 |
| CVE-2025-62902 | 5.3 | Oct 27 | WordPress WP Popup Builder plugin <= 1.3.8 - Sensitive Data Exposure vulnerability Affected: through 1.3.8 |
| CVE-2022-2405 | 4.3 | Sep 26 | The WP Popup Builder WordPress plugin before 1.2.9 does not have authorisation and CSRF check in an AJAX action, allowing any authenticated users, such as subscribers to delete… Affected: before 1.2.9 |
Showing 3