Read the docs

Popup-Builder

Records1All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

Popup-Builder records in CISA KEV

No Popup-Builder vulnerabilities are listed in CISA KEV.

Records

1 record

Priority MEDIUM 56

WordPress Popup Builder 3.49 contains a persistent cross-site scripting vulnerability that allows authenticated attackers to inject malicious scripts by breaking out of option tags in the post_title parameter.

CVSS 4.0MEDIUM 5.1 Network Low privileges User interaction EPSS 0.00171 Published 2026-06-04 No fix listed CWE-79
Open these records in search →