Medium · 5.4 CVE-2022-38070 EUVD-2022-40675GHSA-h8mj-33h3-x93p

WordPress Pop-up plugin <= 1.1.5 - Privilege Escalation vulnerability

Published Sep 9, 2022 · Updated Apr 28, 2026 · Assigned by Patchstack

Vendor: Pop-ups Product: Pop-up (WordPress plugin) Category: Web / CMS

Description

Privilege Escalation (subscriber+) vulnerability in Pop-up plugin <= 1.1.5 at WordPress.

Affected products

Vendor	Product	Affected	Fixed
Pop-ups	Pop-up (WordPress plugin)	<= 1.1.5 – ≤ 1.1.5	—

References