Skip to content
OpenAdvisories

Vendor

timersys

3 known vulnerabilities.

Products

WP Popups – WordPress Popup builder 2 WP Popups 1
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Medium 5.3
    CVE-2024-6555

    WP Popups – WordPress Popup builder <= 2.2.0.1 - Unauthenticated Full Path Disclosure

    The WP Popups – WordPress Popup builder plugin for WordPress is vulnerable to Full Path Disclosure in all versions up to, and including, 2.2.0.1. This is due the plugin utilizing mobiledetect without preventing direct access to the files. This makes it possib…

    timersys WP Popups – WordPress Popup builder Web / CMS
  • Medium 5.9
    CVE-2024-29105

    WordPress WP Popups – WordPress Popup builder plugin <= 2.1.5.5 - Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Timersys WP Popups allows Stored XSS.This issue affects WP Popups: from n/a through 2.1.5.5.

    timersys WP Popups
  • Medium 6.5
    CVE-2023-24003

    WordPress WP Popups Plugin <= 2.1.4.8 is vulnerable to Cross Site Scripting (XSS)

    Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in Timersys WP Popups – WordPress Popup plugin <= 2.1.4.8 versions.

    timersys WP Popups – WordPress Popup builder Web / CMS