Popup Box (Unknown) - vulnerabilities (CVEs)
9 CVEs, 0 in the last 30 days, 2 known versions, newest CVE from 2026-04-07. Vendor: Unknown.
CVEs of Popup Box
- CVE-2025-15611 - CVSS 5.4 (medium), 2026-04-07: The Popup Box WordPress plugin before 5.5.0 does not properly validate nonces in the add_or_edit_popupbox() function before saving popup data, allowing…
- CVE-2024-9599 - CVSS 5.4 (medium), 2025-05-15: The Popup Box WordPress plugin before 4.7.8 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform…
- CVE-2024-3477 - CVSS 4.3 (medium), 2024-05-02: The Popup Box WordPress plugin before 2.2.7 does not have CSRF checks in some bulk actions, which could allow attackers to make logged in admins perform…
- CVE-2023-6591 - CVSS 4.8 (medium), 2024-02-12: The Popup Box WordPress plugin before 20.9.0 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to…
- CVE-2023-5874 - CVSS 4.8 (medium), 2023-12-04: The Popup box WordPress plugin before 3.8.6 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform…
- CVE-2023-5809 - CVSS 4.8 (medium), 2023-12-04: The Popup box WordPress plugin before 3.8.6 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform…
- CVE-2023-5343 - CVSS 4.8 (medium), 2023-11-20: The Popup box WordPress plugin before 3.7.9 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform…
- CVE-2023-4390 - CVSS 4.8 (medium), 2023-10-31: The Popup box WordPress plugin before 3.7.2 does not sanitize and escape some Popup fields, which could allow high-privilege users such as an administrator to…
- CVE-2023-2362 - CVSS 6.1 (medium), 2023-06-12: The Float menu WordPress plugin before 5.0.2, Bubble Menu WordPress plugin before 3.0.4, Button Generator WordPress plugin before 2.3.5, Calculator Builder…
