Vulnerabilities

TI-2024-21674 CVE-2024-32800 · GHSA-wh5g-f23x-8cqh

WordPress Popup – Popup More Popups plugin <= 2.3.1 - Cross Site Scripting (XSS) vulnerability

LOW 28

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Felix Moira Popup More Popups allows Stored XSS.This issue affects Popup More Popups: from n/a through 2.3.1.

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00248 Published 2024-05-17 No fix listed CWE-79

TI-2024-00780 CVE-2024-0844 · GHSA-wxfh-8hrr-vfjw

Path traversal in devfelixmoira Popup More Popups, Lightboxes, and more popup modules

LOW 33

The Popup More Popups, Lightboxes, and more popup modules plugin for WordPress is vulnerable to Local File Inclusion in version 2.1.6 via the ycfChangeElementData() function.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.00659 Published 2024-02-02 No fix listed CWE-22

Vulnerabilities

Filters

WordPress Popup – Popup More Popups plugin <= 2.3.1 - Cross Site Scripting (XSS) vulnerability

Path traversal in devfelixmoira Popup More Popups, Lightboxes, and more popup modules