High
CVE-2024-2544
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 48
Reset filters
Medium
CVE-2024-35655
Brave – Create Popup, Optins, Lead Generation, Survey, Sticky Elements & Interactive Content <= 0.6.9 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2024-2506
Popup Builder <= 4.2.7 - Authenticated(Contributor+) Stored Cross-Site Scripting via Custom JS
High
CVE-2024-30453
Brave Popup Builder <= 0.6.5 - Unauthenticated Server-Side Request Forgery
Medium
CVE-2024-30184
Popup Builder <= 4.2.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2023-6294
Popup Builder <= 4.2.5 - Authenticated (Admin+) Server-Side Request Forgery
Medium
CVE-2023-51534
Brave Popup Builder <= 0.6.2 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2023-6000
Popup Builder <= 4.2.2 - Unauthenticated Stored Cross-Site Scripting
Medium
CVE-2023-3226
Popup Builder <= 4.2.1 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2023-33999
Freemius SDK <= 2.5.9 - Reflected Cross-Site Scripting via fs_request_get
Medium
CVE-2022-2404
WP Popup Builder <= 1.2.8 - Reflected Cross-Site Scripting
High
CVE-2022-2405
WP Popup Builder <= 1.2.9 - Missing Authorization and Cross-Site Request Forgery
High
CVE-2022-29495
Popup Builder – Create highly converting, mobile friendly marketing popups. <= 4.1.11 - Cross-Site Request Forgery to Settings Update
Medium
CVE-2022-1894
Popup Builder <= 4.1.10 - Authenticated (Admin+) Cross-Site Scripting
Medium
CVE-2022-32289
Popup Builder <= 4.1.0 - Cross-Site Request Forgery
Critical
CVE-2022-0479
Popup Builder <= 4.1.0 - SQL Injection
High
CVE-2021-25082
Popup Builder <= 4.0.6 - Local File Inclusion and PHAR Deserialization
High
CVE-2022-0228
Popup Builder <= 4.0.6 - Authenticated SQL Injection via order & orderby Parameters
Medium
CVE-2021-24152
Popup Builder <= 3.73 - Reflected Cross-Site Scripting
Medium
ec0fff2a-602d-441b-89d1-64d609a4abc0
Popup Builder <= 3.72 Missing Authorization on AJAX actions
Medium
CVE-2020-10195
Popup Builder <= 3.63 - Authenticated Settings Modification, Configuration Disclosure, and User Data Export
High
CVE-2020-10196
Popup Builder <= 3.63 - Unauthenticated Stored Cross-Site Scripting
Critical
CVE-2020-9006
Popup Builder 2.2.8 - 2.6.7.6 - PHP Object Injection
Critical
CVE-2019-14695
Popup Builder <= 3.44 - SQL Injection
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.