CVE-2024-52434: falha crítica em supsystic Popup by Supsystic
WordPress Popup by Supsystic plugin <= 1.10.29 - Remote Code Execution (RCE) vulnerability
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
28Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 9.1epss 1.1%
Deserialization of Untrusted Data vulnerability in supsystic Popup by Supsystic popup-by-supsystic allows Command Injection.This issue affects Popup by Supsystic: from n/a through <= 1.10.29.
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
Produtos afetados
supsystic · Popup by SupsysticCVEs relacionadas — supsystic Popup by Supsystic
No mesmo produto, das mais perigosas para as menos.
CVE-2023-51353MEDIUMWordPress Popup by Supsystic plugin <= 1.10.19 - Broken Access Control vulnerabilityEPSS 0.6%CVE-2026-73380CRITICALWordPress Popup by Supsystic plugin <= 1.13.0 - PHP Object Injection vulnerabilityEPSS 0.6%CVE-2026-73381CRITICALWordPress Popup by Supsystic plugin <= 1.13.0 - Broken Authentication vulnerabilityEPSS 0.5%CVE-2024-31421MEDIUMWordPress Popup by Supsystic plugin <= 1.10.27 - Broken Access Control vulnerabilityEPSS 0.4%CVE-2026-27537MEDIUMWordPress Popup by Supsystic plugin <= 1.11.2 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.2%CVE-2026-102398HIGHWordPress Popup by Supsystic plugin <= 1.13.1 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.2%