Advisories · Technology
Popup Box.
Every CVE that names Popup Box among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 5.4 Medium
Popup Box AYS Pro < 5.5.0 - Admin+ Stored Cross-Site Scripting (XSS) via CSRF
- Popup Box
- CVSS 5.4 Medium
Popup Box < 4.7.8 - Admin+ Stored XSS
- Popup Box
- CVSS 4.3 Medium
WordPress Popup box plugin <= 4.5.1 - Broken Access Control vulnerability
- Popup box
- Broken access control
- CVSS 7.1 High
WordPress Popup Box plugin <= 4.1.2 - CSRF to XSS vulnerability
- Popup box
- Cross-site request forgery (CSRF)
- CVSS 4.3 Medium
Popup Box < 2.2.7 - Popup Deletion via CSRF
- Popup Box
- Cross-site request forgery (CSRF)
- CVSS 4.8 Medium
Popup Box Pro < 20.9.0 - Admin+ Stored XSS
- Popup Box
- Cross-site scripting (XSS)
-
Popup box < 3.8.6 - Admin+ Stored XSS in Categories
- Popup box
-
Popup box < 3.8.6 - Admin+ Stored XSS in Popup Settings
- Popup box
- CVSS 4.8 Medium
Popup Box < 3.7.9 - Admin+ Stored XSS
- Popup box
- CVSS 4.8 Medium
Popup box < 3.7.2 - Admin+ Stored Cross-Site Scripting
- Popup box
- CVSS 7.1 High
WordPress Popup box Plugin <= 3.4.4 is vulnerable to Cross Site Scripting (XSS)
- Popup box
- Cross-site scripting (XSS)
- CVSS 6.1 Medium
Multiple Plugins from Wow-Company - Reflected XSS
- Float menu
- Bubble Menu