Skip to content
OpenAdvisories

Vendor

supsysticcom

12 known vulnerabilities.

Products

Contact Form by Supsystic 4 Data Tables Generator by Supsystic 3 Easy Google Maps 2 Smart Popup by Supsystic 2 WordPress Flipbook by Supsystic 1
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 8.8
    CVE-2026-18322 Public exploit

    Smart Popup by Supsystic <= 1.12.0 - Unauthenticated Privilege Escalation to Administrator

    The Smart Popup by Supsystic plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 1.12.0. This is due to a permission map collision in the `havePermissions()` function in `classes/frame.php`, where `array_merge()` o…

    supsysticcom Smart Popup by Supsystic Web / CMS
  • Critical 9.8
    CVE-2026-4257 Public exploit EPSS 41%

    Contact Form by Supsystic <= 1.7.36 - Unauthenticated Server-Side Template Injection via Prefill Functionality

    The Contact Form by Supsystic plugin for WordPress is vulnerable to Server-Side Template Injection (SSTI) leading to Remote Code Execution (RCE) in all versions up to, and including, 1.7.36. This is due to the plugin using the Twig `Twig_Loader_String` templa…

    supsysticcom Contact Form by Supsystic Web / CMS