Skip to content
OpenAdvisories

Product · Themes4WP

Popularis Extra

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Medium 5.4
    CVE-2026-25422

    WordPress Popularis Extra plugin <= 1.2.10 - Cross Site Request Forgery (CSRF) vulnerability

    Cross-Site Request Forgery (CSRF) vulnerability in Themes4WP Popularis Extra popularis-extra allows Cross Site Request Forgery.This issue affects Popularis Extra: from n/a through <= 1.2.10.

    Themes4WP Popularis Extra
  • Medium 4.3
    CVE-2024-10795

    Popularis Extra <= 1.2.7 - Authenticated (Contributor+) Post Disclosure

    The Popularis Extra plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 1.2.7 via the 'elementor-template' shortcode due to insufficient restrictions on which posts can be included. This makes it possible for authe…

    Themes4WP Popularis Extra Web / CMS
  • Medium 6.1
    CVE-2024-9353

    Popularis Extra <= 1.2.6 - Reflected Cross-Site Scripting

    The Popularis Extra plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of add_query_arg & remove_query_arg without appropriate escaping on the URL in all versions up to, and including, 1.2.6. This makes it possible for unauthe…

    Themes4WP Popularis Extra Web / CMS