Advisories · Technology
ays-pro Popup Box – Create Countdown, Coupon, Video, Contact Form Popups.
Every CVE that names ays-pro Popup Box – Create Countdown, Coupon, Video, Contact Form Popups among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 4.8 Medium
Popup Box 6.4.1 - 6.4.2 - Unauthenticated Arbitrary Shortcode Execution via Client-IP / X-Forwarded-For HTTP Headers
- ays-pro Popup Box – Create Countdown, Coupon, Video, Contact Form Popups
- Code injection
- CVSS 4.3 Medium
Popup Box <= 6.1.1 - Cross-Site Request Forgery to Popup Status Change
- ays-pro Popup Box – Create Countdown, Coupon, Video, Contact Form Popups
- Cross-site request forgery (CSRF)
- CVSS 5.3 Medium
Popup Box – Create Countdown, Coupon, Video, Contact Form Popups <= 4.9.7 - Missing Authorization to Unauthenticated Limited Options Update
- ays-pro Popup Box – Create Countdown, Coupon, Video, Contact Form Popups
- Broken access control
- CVSS 5.3 Medium
Popup Box – Best WordPress Popup Plugin <= 4.3.6 - Missing Authorization to Information Exposure
- ays-pro Popup Box – Create Countdown, Coupon, Video, Contact Form Popups
- Broken access control