Popup Builder (Unknown) - vulnerabilities (CVEs)

6 CVEs, 1 in the last 30 days, 2 known versions, newest CVE from 2026-10-23. Vendor: Unknown.

CVEs of Popup Builder

• CVE-2026-112230 - CVSS 3.7 (low), 2026-10-23: The Popup Builder WordPress plugin before 4.4.6 does not perform authorization checks before trashing popup content in a maintenance routine that runs on…
• CVE-2024-9428 - CVSS 4.8 (medium), 2024-12-12: The Popup Builder WordPress plugin before 4.3.5 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to…
• CVE-2024-3236 - CVSS 5.4 (medium), 2024-06-17: The Popup Builder WordPress plugin before 1.1.33 does not sanitise and escape some of its Notification fields, which could allow users such as contributor and…
• CVE-2023-6294 - CVSS 7.5 (high), 2024-02-12: The Popup Builder WordPress plugin before 4.2.6 does not validate a parameter before making a request to it, which could allow users with the administrator…
• CVE-2023-6000 - CVSS 6.1 (medium), 2024-01-01: The Popup Builder WordPress plugin before 4.2.3 does not prevent simple visitors from updating existing popups, and injecting raw JavaScript in them, which…
• CVE-2023-3226 - CVSS 4.8 (medium), 2023-09-25: The Popup Builder WordPress plugin before 4.2.0 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to…