CVE-2025-24746

<= 1.20.2

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Daniel Iser Popup Maker popu

6.5MEDIUM

CVE-2022-45819

< 1.18.0

Missing Authorization vulnerability in Popup Maker Popup Maker allows Exploiting Incorrectly Configured Access Control Security Le

3.5LOW

CVE-2024-10583

< 1.20.3

The Popup Maker - Boost Sales, Conversions, Optins, Subscribers with the Ultimate WP Popups Builder plugin for WordPress is vulner

5.4MEDIUM

CVE-2024-47358

< 1.20.0

Missing Authorization vulnerability in Daniel Iser Popup Maker popup-maker.This issue affects Popup Maker: from n/a through <= 1.1

5.3MEDIUM

CVE-2024-5561

< 1.19.1

The Popup Maker WordPress plugin before 1.19.1 does not sanitise and escape some of its settings, which could allow high privileg

4.8MEDIUM

CVE-2024-7054

< 1.19.1

The Popup Maker - Boost Sales, Conversions, Optins, Subscribers with the Ultimate WP Popups Builder plugin for WordPress is vulner

6.4MEDIUM

CVE-2024-2336

< 1.19.0

The Popup Maker - Popup for opt-ins, lead gen, & more plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the pl

6.4MEDIUM

CVE-2022-47597

< 1.18.0

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Popup Maker Popup Maker - Popup for opt-ins, lead gen,

5.3MEDIUM

CVE-2022-4381

< 1.16.9

The Popup Maker WordPress plugin before 1.16.9 does not validate and escape one of its shortcode attributes, which could allow use

5.4MEDIUM

CVE-2022-4362

< 1.16.9

The Popup Maker WordPress plugin before 1.16.9 does not validate and escape one of its shortcode attributes, which could allow use

5.4MEDIUM

CVE-2022-3690

< 1.16.11

The Popup Maker WordPress plugin before 1.16.11 does not sanitise and escape some of its Popup options, which could allow users wi

4.8MEDIUM

CVE-2022-1104

< 1.16.5

The Popup Maker WordPress plugin before 1.16.5 does not sanitise and escape some of its Popup settings, which could allow high pri

4.8MEDIUM

CVE-2019-17574

< 1.8.13

An issue was discovered in the Popup Maker plugin before 1.8.13 for WordPress. An unauthenticated attacker can partially control t

9.1CRITICAL

CVE-2017-2284

all versions

Cross-site scripting vulnerability in Popup Maker prior to version 1.6.5 allows remote attackers to inject arbitrary web script or

6.1MEDIUM