CVE · Medium
| CVE | Vulnerability | Type | Severity | Affected | Fixed in | Published | Status |
|---|---|---|---|---|---|---|---|
| CVE-2025-24746 | Popup Maker – Boost Sales, Conversions, Optins, Subscribers with the Ultimate WP Popup Builder [popup-maker] < 1.20.3 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | Medium 6.5 | < 1.20.3 | 1.20.3 | 2025-01-24 | — |
The Popup Maker plugin for WordPress is susceptible to stored cross-site scripting (XSS) attacks in versions 1.20.2 and earlier, as it fails to properly sanitize input and escape output. Authenticated attackers with contributor permissions or higher can inject malicious scripts that will run when other users view the affected pages.
Based on public CVE data (MITRE/NVD).
No signup, no credit card — enter your URL and get a security report in seconds.