Skip to content
OpenAdvisories

Product · timersys

WP Popups – WordPress Popup builder

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 5.3
    CVE-2024-6555 Scanner template

    WP Popups – WordPress Popup builder <= 2.2.0.1 - Unauthenticated Full Path Disclosure

    The WP Popups – WordPress Popup builder plugin for WordPress is vulnerable to Full Path Disclosure in all versions up to, and including, 2.2.0.1. This is due the plugin utilizing mobiledetect without preventing direct access to the files. This makes it possib…

    timersys WP Popups – WordPress Popup builder Web / CMS
  • Medium 6.5
    CVE-2023-24003

    WordPress WP Popups Plugin <= 2.1.4.8 is vulnerable to Cross Site Scripting (XSS)

    Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in Timersys WP Popups – WordPress Popup plugin <= 2.1.4.8 versions.

    timersys WP Popups – WordPress Popup builder Web / CMS