Medium
CVE-2026-85005
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 25
Reset filters
Medium
CVE-2026-85004
Popup Maker WP <= 1.4.5 - Missing Authorization
High
CVE-2026-87915
Popup Maker <= 1.24.0 - Unauthenticated Stored Cross-Site Scripting via values[Name] Parameter
Medium
CVE-2026-15797
Popup Maker <= 1.24.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via post_title
High
CVE-2026-28177
Popup Maker – Boost Sales, Conversions, Optins, Subscribers with the Ultimate WP Popup Builder <= 1.23.0 - Unauthenticated Stored Cross-Site Scripting
High
CVE-2026-8848
Popup Maker – Boost Sales, Conversions, Optins, Subscribers with the Ultimate WP Popup Builder <= 1.22.0 - Missing Authorization to Authenticated (Editor+) Arbitrary Plugin Installation
Medium
CVE-2025-9490
Popup Maker <= 1.20.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via title Parameter
Medium
CVE-2025-4205
Popup Maker <= 1.20.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via popupID Parameter
Medium
CVE-2025-24746
Popup Maker <= 1.20.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-10583
Popup Maker – Boost Sales, Conversions, Optins, Subscribers with the Ultimate WP Popups Builder <= 1.20.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-47358
Popup Maker <= 1.19.2 - Missing Authorization
Medium
CVE-2024-5561
Popup Maker <= 1.19.0 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2024-7054
Popup Maker <= 1.19.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-34770
Popup Maker – Responsive popup, Exit Intent Pop up, Email Optins, Autoresponder & More <= 1.3.6 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Medium
CVE-2024-2336
Popup Maker – Popup for opt-ins, lead gen, & more <= 1.18.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2022-47597
Popup Maker <= 1.17.1 - Sensitive Data Exposure via debug log file
Medium
CVE-2022-45819
Popup Maker <= 1.17.1 - Missing Authorization via save_popup_enabled_state
Medium
533f71d5-823d-45eb-8ecf-76afafd2a5d3
Popup Maker <= 1.18.0 - Cross-Site Request Forgery via init
Medium
CVE-2022-3690
Popup Maker <= 1.16.10 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2022-4381
Popup Maker <= 1.16.8 - Authenticated (Contributor+) Cross-Site Scripting
Medium
CVE-2022-4362
Popup Maker <= 1.16.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2022-1104
Popup Maker <= 1.16.4 - Authenticated (Admin+) Cross-Site Scripting
High
CVE-2019-17574
Popup-Maker <= 1.8.12 - Unauthenticated information disclosure
High
3fda31fa-efc9-44b9-99ba-9e3e23aa2ee0
Freemius SDK <= 2.2.3 - Missing Authorization to Arbitrary Options Update
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.