All products

popover-windows

WordPress · Plugin
2 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
Popover Windows <= 1.2 - Cross-Site Request Forgery to Arbitrary Popover Configuration UpdateCVE-2025-14394 popover-windows WordPress Medium No fix reported
Popover Windows <= 1.2 - Missing Authorization to Authenticated (Subscriber+) Popover Configuration Update via AJAX ActionsCVE-2025-14395 popover-windows WordPress Medium No fix reported