Advisories · Technology

Popup Maker.

Every CVE that names Popup Maker among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-85004 CVE record

CVSS 4.3 Medium

Popup Maker WP <= 1.4.5 - Subscriber+ Missing Authorization via sgpm_connect
- Popup Maker
- Broken access control
Not analysed yet 2 Oct 2026
CVE-2022-45819 CVE record

CVSS 3.5 Low

WordPress Popup Maker plugin <= 1.17.1 - Broken Access Control vulnerability
- Popup Maker
- Broken access control
Not analysed yet 13 Dec 2024
CVE-2024-5561 CVE record

CVSS 4.8 Medium

Popup Maker < 1.19.1 - Admin+ Stored XSS
- Popup Maker
Not analysed yet 9 Sept 2024
CVE-2022-4381 CVE record

CVSS 5.4 Medium

Popup Maker < 1.16.9 - Contributor+ Stored XSS via Subscription Form
- Popup Maker
Not analysed yet 2 Jan 2023
CVE-2022-4362 CVE record

CVSS 5.4 Medium

Popup Maker < 1.16.9 - Contributor+ Stored XSS via Shortcode
- Popup Maker
Not analysed yet 2 Jan 2023
CVE-2022-3690 CVE record

CVSS 5.5 Medium

Popup Maker < 1.16.11 - Contributor+ Stored Cross Site Scripting
- Popup Maker
Not analysed yet 21 Nov 2022
CVE-2017-2284 CVE record

Popup Maker: Cross-site scripting vulnerability in Popup Maker prior to version 1.6.5 allows remote…
- Popup Maker
Not analysed yet 2 Aug 2017