Vulnerabilities

TI-2025-22613 CVE-2025-31432 · GHSA-gwfx-p3mg-f99w

WordPress Pop-Up Chop Chop plugin <= 2.1.7 - Local File Inclusion Vulnerability

LOW 36

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Chop Chop Pop-Up Chop Chop pop-up allows PHP Local File Inclusion.This issue affects Pop-Up Chop Ch…

CVSS 3.1HIGH 7.5 Network Low privileges No interaction EPSS 0.00607 Published 2025-03-28 No fix listed CWE-98

TI-2023-19326 CVE-2023-37893 · GHSA-2xhj-g84w-4x4j

WordPress Coming Soon Chop Chop Plugin <= 2.2.4 is vulnerable to Cross Site Scripting (XSS)

LOW 31

Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Chop-Chop Coming Soon Chop Chop plugin <= 2.2.4 versions.

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00382 Published 2023-09-01 No fix listed CWE-79

TI-2022-20035 CVE-2022-41638 · GHSA-x2jr-9c9v-6r8c

WordPress Pop-Up Chop Chop plugin <= 2.1.7 - Auth. Stored Cross-Site Scripting (XSS) vulnerability

LOW 25

Auth. Stored Cross-Site Scripting (XSS) in Pop-Up Chop Chop plugin <= 2.1.7 on WordPress.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00565 Published 2022-10-21 No fix listed CWE-79

Vulnerabilities

Filters

WordPress Pop-Up Chop Chop plugin <= 2.1.7 - Local File Inclusion Vulnerability

WordPress Coming Soon Chop Chop Plugin <= 2.2.4 is vulnerable to Cross Site Scripting (XSS)

WordPress Pop-Up Chop Chop plugin <= 2.1.7 - Auth. Stored Cross-Site Scripting (XSS) vulnerability