Skip to content
OpenAdvisories

Vendor

supsysticcom

12 known vulnerabilities.

1 result · Clear filters · Feed

  • High 8.8
    CVE-2026-18322 Public exploit

    Smart Popup by Supsystic <= 1.12.0 - Unauthenticated Privilege Escalation to Administrator

    The Smart Popup by Supsystic plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 1.12.0. This is due to a permission map collision in the `havePermissions()` function in `classes/frame.php`, where `array_merge()` o…