All products
ays-popup-box
WordPress · Plugin21 reports| Report | Product | Ecosystem | Severity | Fix status | Last updated |
|---|
| Popup Box 6.4.1 - 6.4.2 - Unauthenticated Arbitrary Shortcode Execution via Client-IP / X-Forwarded-For HTTP HeadersCVE-2026-100159 |
ays-popup-box |
WordPress |
Medium
|
Fix reported |
|
| Popup Box – Create Countdown, Coupon, Video, Contact Form Popups <= 6.0.1 - Authenticated (Administrator+) SQL InjectionCVE-2026-57631 |
ays-popup-box |
WordPress |
Medium
|
Fix reported |
|
| Popup Box – Create Countdown, Coupon, Video, Contact Form Popups <= 6.2.9 - Reflected Cross-Site ScriptingCVE-2026-54192 |
ays-popup-box |
WordPress |
Medium
|
Fix reported |
|
| Popup Box – Create Countdown, Coupon, Video, Contact Form Popups < 5.5.0 - Unauthenticated Stored Cross-Site ScriptingCVE-2025-15611 |
ays-popup-box |
WordPress |
High
|
Fix reported |
|
| Popup Box <= 6.1.1 - Cross-Site Request Forgery to Popup Status ChangeCVE-2026-1165 |
ays-popup-box |
WordPress |
Medium
|
Fix reported |
|
| Popup box <= 6.0.7 - Cross-Site Request ForgeryCVE-2025-69021 |
ays-popup-box |
WordPress |
Medium
|
Fix reported |
|
| Popup box <= 5.5.4 - Cross-Site Request ForgeryCVE-2025-57931 |
ays-popup-box |
WordPress |
Medium
|
Fix reported |
|
| Popup Box <= 4.7.7 - Authenticated (Administrator+) Stored Cross-Site ScriptingCVE-2024-9599 |
ays-popup-box |
WordPress |
Medium
|
Fix reported |
|
| Popup Box – Create Countdown, Coupon, Video, Contact Form Popups <= 4.9.7 - Missing Authorization to Unauthenticated Limited Options UpdateCVE-2024-10861 |
ays-popup-box |
WordPress |
Medium
|
Fix reported |
|
| Popup Box Business (7.0.0 - 7.9.0) and Developer (20.0.0 - 20.9.0) - Authenticated (Admin+) Stored Cross-Site ScriptingCVE-2023-6591 |
ays-popup-box |
WordPress |
Medium
|
Fix reported |
|
| Popup box <= 4.5.1 - Missing AuthorizationCVE-2024-37096 |
ays-popup-box |
WordPress |
Medium
|
Fix reported |
|
| Popup box <= 4.1.2 - Cross-Site Request ForgeryCVE-2024-34367 |
ays-popup-box |
WordPress |
Medium
|
Fix reported |
|
| Popup Box – Best WordPress Popup Plugin <= 4.3.6 - Missing Authorization to Information ExposureCVE-2024-3897 |
ays-popup-box |
WordPress |
Medium
|
Fix reported |
|
| Popup box < 2.3.4 - Authenticated SQL InjectionCVE-2021-24458 |
ays-popup-box |
WordPress |
High
|
Fix reported |
|
| Popup Box <= 3.7.1 - Authenticated(Administrator+) Stored Cross-Site ScriptingCVE-2023-4390 |
ays-popup-box |
WordPress |
Medium
|
Fix reported |
|
| Popup Box – Best WordPress Popup Plugin <= 3.7.8 - Authenticated (Admin+) Stored Cross-Site ScriptingCVE-2023-5343 |
ays-popup-box |
WordPress |
Medium
|
Fix reported |
|
| Popup box <= 2.3.3 - Cross-Site Scripting |
ays-popup-box |
WordPress |
Medium
|
Fix reported |
|
| Popup Box <= 3.8.6 - Authenticated (Administrator+) Stored Cross-Site ScriptingCVE-2023-5874 |
ays-popup-box |
WordPress |
Medium
|
Fix reported |
|
| Popup Box <= 3.8.6 - Authenticated (Administrator+) Stored Cross-Site ScriptingCVE-2023-5809 |
ays-popup-box |
WordPress |
Medium
|
Fix reported |
|
| Popup Box <= 3.7.0 - Authenticated(Administrator+) Stored Cross-Site Scripting |
ays-popup-box |
WordPress |
Medium
|
Fix reported |
|
