Medium · 6.8 CVE-2022-29445 EUVD-2022-33783GHSA-7jq5-gwqv-xc5f

WordPress Popup Box plugin <= 2.1.2 - Authenticated Local File Inclusion (LFI) vulnerability

Published May 18, 2022 · Updated Apr 28, 2026 · Assigned by Patchstack

Description

Authenticated (administrator or higher role) Local File Inclusion (LFI) vulnerability in Wow-Company's Popup Box plugin <= 2.1.2 at WordPress.

Vendor	Product	Affected	Fixed
Wow-Company	Popup Box (WordPress plugin)	<= 2.1.2 – ≤ 2.1.2	—