Exposure of Popup Maker

WordPress plugins

14

exposure score

72,927

sites use

0

exploited

0

critical

CVEs

8 results

CVE-2017-2284—Cross-site scripting vulnerability in Popup Maker prior to version 1.6.5 allows remote attackers to inject arbitrary web script or HTML via EPSS 1.6%CVE-2022-3690MEDIUMPopup Maker < 1.16.11 - Contributor+ Stored Cross Site ScriptingEPSS 0.6%CVE-2022-4362MEDIUMPopup Maker < 1.16.9 - Contributor+ Stored XSS via ShortcodeEPSS 0.6%CVE-2022-4381MEDIUMPopup Maker < 1.16.9 - Contributor+ Stored XSS via Subscription FormEPSS 0.5%CVE-2024-5561MEDIUMPopup Maker < 1.19.1 - Admin+ Stored XSSEPSS 0.4%CVE-2024-47358MEDIUMWordPress Popup Maker plugin <= 1.19.2 - Broken Access Control vulnerabilityEPSS 0.4%CVE-2022-45819LOWWordPress Popup Maker plugin <= 1.17.1 - Broken Access Control vulnerabilityEPSS 0.4%CVE-2025-24746MEDIUMWordPress Popup Maker plugin <= 1.20.2 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.3%

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →