IP-DB.com
Türkçe English Deutsch Español
Log In Get API Key

popupbuilder vulnerabilities (CVE)

CVE records published for popupbuilder, newest first. Follow to get an email when a new one appears.

Popup Builder – Create highly converting, mobile friendly marketing popups. 7
7 results
9.1Critical
CVE-2026-89270

Popup Builder <= 4.4.5 - Missing Authorization to Unauthenticated Arbitrary Popup Post Trashing via 'post_type' and 'sg_popup_preview_id' Parameters

popupbuilder Popup Builder – Create highly converting, mobile friendly marketing popups.

The Popup Builder – Create highly converting, mobile friendly marketing popups. plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 4.4.5 This is due to the plugin not properly verifying that a user is authorized t…

5.3Medium
CVE-2025-13079

Popup Builder - Create highly converting, mobile friendly marketing popups. <= 4.4.2 - Improper Authorization to Unauthenticated Subscriber Removal via Predictable Tokens

popupbuilder Popup Builder – Create highly converting, mobile friendly marketing popups.

The Popup Builder – Create highly converting, mobile friendly marketing popups. plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 4.4.2. This is due to the plugin generating predictable unsubscribe tokens using d…

6.4Medium
CVE-2025-9856

Popup Builder – Create highly converting, mobile friendly marketing popups. <= 4.4.1 - Authenticated (Contributor+) Stored Cross-Site Scripting

popupbuilder Popup Builder – Create highly converting, mobile friendly marketing popups.

The Popup Builder – Create highly converting, mobile friendly marketing popups. plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'sg_popup' shortcode in all versions up to, and including, 4.4.1 due to insufficient input sanit…

5.3Medium
CVE-2024-2541

Popup Builder <= 4.3.6 - Sensitive Information Exposure via Imported Subscribers CSV File

popupbuilder Popup Builder – Create highly converting, mobile friendly marketing popups.; popup_builder popup_builder

The Popup Builder plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 4.3.6 via the Subscribers Import feature. This makes it possible for unauthenticated attackers to extract sensitive data after an admi…

8.1High
CVE-2023-6696

Popup Builder – Create highly converting, mobile friendly marketing popups <= 4.3.1 - Missing Authorization and Nonce Exposure

popupbuilder Popup Builder – Create highly converting, mobile friendly marketing popups.

The Popup Builder – Create highly converting, mobile friendly marketing popups. plugin for WordPress is vulnerable to unauthorized access of functionality due to a missing capability check on several functions in all versions up to, and including, 4.3.1. Whil…

7.4High
CVE-2024-2544

Popup Builder <= 4.3.0 - Missing Authorization in Multiple AJAX Actions

popupbuilder Popup Builder – Create highly converting, mobile friendly marketing popups.

The Popup Builder plugin for WordPress is vulnerable to unauthorized modification of data and loss of data due to a missing capability check on all AJAX actions. This makes it possible for authenticated attackers, with subscriber-level access and above, to pe…