Skip to content
OpenAdvisories

Vendor

supsysticcom

15 known vulnerabilities.

Products

Contact Form by Supsystic 4 Data Tables Generator by Supsystic 3 Popup by Supsystic 2 Easy Google Maps 2 Smart Popup by Supsystic 2 Social Share Buttons by Supsystic (WordPress plugin) 1 WordPress Flipbook by Supsystic 1
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 7.2
    CVE-2026-83625

    Contact Form by Supsystic <= 1.10.2 - Unauthenticated Stored Cross-Site Scripting via IP Address Header

    The Contact Form by Supsystic plugin for WordPress is vulnerable to Stored Cross-Site Scripting via IP Address Header in all versions up to, and including, 1.10.2 due to insufficient input sanitization and output escaping. This makes it possible for unauthent…

    supsysticcom Contact Form by Supsystic Web / CMS
  • High 8.8
    CVE-2026-18322 Public exploit

    Smart Popup by Supsystic <= 1.12.0 - Unauthenticated Privilege Escalation to Administrator

    The Smart Popup by Supsystic plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 1.12.0. This is due to a permission map collision in the `havePermissions()` function in `classes/frame.php`, where `array_merge()` o…

    supsysticcom Smart Popup by Supsystic Web / CMS