PLUGIN SECURITY
Is Ays Popup Box safe?
Known vulnerabilities, PHP compatibility and safer alternatives for the Ays Popup Box WordPress plugin — checked against WP Clinic's local security database.
Plugin details
- Slug:
ays-popup-box
Known vulnerabilities
- CVE-2021-24458 — Popup Box – Create Countdown, Coupon, Video, Contact Form Popups [ays-popup-box] < 2.3.4 (SQL Injection) · High
- Popup Box – Create Countdown, Coupon, Video, Contact Form Popups [ays-popup-box] < 2.3.4
- Popup Box – Create Countdown, Coupon, Video, Contact Form Popups [ays-popup-box] < 2.3.4
- CVE-2023-27414 — Popup Box – Create Countdown, Coupon, Video, Contact Form Popups [ays-popup-box] < 3.4.5 (XSS) · High
- Popup Box – Create Countdown, Coupon, Video, Contact Form Popups [ays-popup-box] < 3.7.2
+ 18 more known vulnerabilities
- Popup Box – Create Countdown, Coupon, Video, Contact Form Popups [ays-popup-box] < 3.7.1
- Popup Box – Create Countdown, Coupon, Video, Contact Form Popups [ays-popup-box] < 3.7.2
- CVE-2023-4390 — Popup Box – Create Countdown, Coupon, Video, Contact Form Popups [ays-popup-box] < 3.7.2 (XSS) · Medium
- Popup Box – Create Countdown, Coupon, Video, Contact Form Popups [ays-popup-box] < 3.8.7
- CVE-2023-5343 — Popup Box – Create Countdown, Coupon, Video, Contact Form Popups [ays-popup-box] < 3.7.9 (XSS) · Medium
- CVE-2023-5809 — Popup Box – Create Countdown, Coupon, Video, Contact Form Popups [ays-popup-box] < 3.8.6 (XSS) · Medium
- CVE-2023-5874 — Popup Box – Create Countdown, Coupon, Video, Contact Form Popups [ays-popup-box] < 3.8.6 (XSS) · Medium
- CVE-2023-6591 — Popup Box – Create Countdown, Coupon, Video, Contact Form Popups [ays-popup-box] < 3.9.0 (XSS) · Medium
- CVE-2024-3897 — Popup Box – Create Countdown, Coupon, Video, Contact Form Popups [ays-popup-box] < 4.3.7 (Missing Authorization) · Medium
- CVE-2024-34367 — Popup Box – Create Countdown, Coupon, Video, Contact Form Popups [ays-popup-box] < 4.1.3 (CSRF) · High
- CVE-2024-37096 — Popup Box – Create Countdown, Coupon, Video, Contact Form Popups [ays-popup-box] < 4.5.2 (Missing Authorization) · Medium
- CVE-2024-10861 — Popup Box – Create Countdown, Coupon, Video, Contact Form Popups [ays-popup-box] < 4.9.8 (Missing Authorization) · Medium
- Popup Box – Create Countdown, Coupon, Video, Contact Form Popups [ays-popup-box] < 4.7.8 (XSS) · Medium
- CVE-2025-69021 — Popup Box – Create Countdown, Coupon, Video, Contact Form Popups [ays-popup-box] < 6.0.8 (CSRF) · Medium
- CVE-2025-15611 — Popup Box – Create Countdown, Coupon, Video, Contact Form Popups [ays-popup-box] < 5.5.0 (XSS)
- CVE-2026-1165 — Popup Box – Create Countdown, Coupon, Video, Contact Form Popups [ays-popup-box] < 6.1.2 · Medium
- CVE-2026-54192 — Popup Box – Create Countdown, Coupon, Video, Contact Form Popups [ays-popup-box] < 6.3.0 (XSS) · High
- CVE-2026-57631 — Popup Box – Create Countdown, Coupon, Video, Contact Form Popups [ays-popup-box] < 6.0.2 (SQL Injection) · High
Vulnerabilities are matched against the exact installed version when it's known. Always keep the plugin updated to the latest release.
Check your own WordPress site
Run a free passive scan now, or create a free account and install the WP Clinic plugin for a deep scan of your whole hosting account and AI-assisted repair.