Medium · 5.4 CVE-2025-24711 EUVD-2025-3903GHSA-r3m6-9xgf-3f9v

WordPress Popup Box Plugin <= 3.2.4 - Cross Site Request Forgery (CSRF) vulnerability

Published Jan 24, 2025 · Updated Apr 28, 2026 · Assigned by Patchstack

Description

Cross-Site Request Forgery (CSRF) vulnerability in Wow-Company Popup Box popup-box allows Cross Site Request Forgery.This issue affects Popup Box: from n/a through <= 3.2.4.

Affected products

Vendor	Product	Affected	Fixed
Wow-Company	Popup Box	≤ 3.2.4	—

References

https://patchstack.com/database/Wordpress/Plugin/popup-box/vulnerability/wordpress-popup-box-plugin-3-2-4-cross-site-request-forgery-csrf-vulnerability?_s_id=cve vdb-entry