Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Vendor: Popup Box Team Clear all filters
TI-2024-24625 CVE-2024-37096 · GHSA-5h85-gj3f-vx5v

WordPress Popup box plugin <= 4.5.1 - Broken Access Control vulnerability

Priority LOW 20

Missing Authorization vulnerability in Popup Box Team Popup allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Popup box: from n/a through 4.5.1.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00337 Published 2024-11-01 No fix listed CWE-862
TI-2024-22707 CVE-2024-34367 · GHSA-h786-fjcx-j2mr

WordPress Popup Box plugin <= 4.1.2 - CSRF to XSS vulnerability

Priority LOW 30

Cross-Site Request Forgery (CSRF) vulnerability in Popup Box Team Popup box allows Cross-Site Scripting (XSS).This issue affects Popup box: from n/a through 4.1.2.

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00184 Published 2024-05-06 No fix listed CWE-352