Exposure of Popup Maker

WordPress plugins

17

exposure score

70,131

sites use

0

exploited

0

critical

CVEs

9 results

CVE-2017-2284—Cross-site scripting vulnerability in Popup Maker prior to version 1.6.5 allows remote attackers to inject arbitrary web script or HTML via EPSS 1.9%CVE-2022-3690MEDIUMPopup Maker < 1.16.11 - Contributor+ Stored Cross Site ScriptingEPSS 0.7%CVE-2022-4362MEDIUMPopup Maker < 1.16.9 - Contributor+ Stored XSS via ShortcodeEPSS 0.6%CVE-2022-4381MEDIUMPopup Maker < 1.16.9 - Contributor+ Stored XSS via Subscription FormEPSS 0.5%CVE-2024-5561MEDIUMPopup Maker < 1.19.1 - Admin+ Stored XSSEPSS 0.5%CVE-2022-45819LOWWordPress Popup Maker plugin <= 1.17.1 - Broken Access Control vulnerabilityEPSS 0.4%CVE-2024-47358MEDIUMWordPress Popup Maker plugin <= 1.19.2 - Broken Access Control vulnerabilityEPSS 0.4%CVE-2025-24746MEDIUMWordPress Popup Maker plugin <= 1.20.2 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.3%CVE-2026-28177HIGHWordPress Popup Maker plugin <= 1.23.0 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.2%