CVE Database /
CVE-2025-26944
CVE · High
CVE-2025-26944 — JetPopup [jet-popup] < 2.0.12
| CVE |
Vulnerability |
Type |
Severity |
Affected |
Fixed in |
Published |
Status |
|
CVE-2025-26944
|
JetPopup [jet-popup] < 2.0.12 |
Missing Authorization |
High
7.5
|
< 2.0.12
|
2.0.12 |
2025-04-15 |
—
|
CVE-2025-26944
A security flaw exists within the JetPopup plugin for WordPress, affecting versions prior to 2.0.12, where a crucial capability check is omitted from certain functionality, thereby enabling malicious actors without authentication to execute unintended actions. This oversight compromises the plugin's access control mechanisms.
Based on public CVE data (MITRE/NVD).
Scan your WordPress site free
No signup, no credit card — enter your URL and get a security report in seconds.
See the full security page for this plugin
Browse the CVE database
Browse all security findings