danieliser

Products

Exploited and recent CVEs

  • CVE-2026-87915 High 7.2 Popup Maker <= 1.24.0 - Unauthenticated Stored Cross-Site Scripting via values[Name] Parameter 0.5%
  • CVE-2026-15797 Medium 6.4 Popup Maker <= 1.24.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via post_title 0.4%
  • CVE-2026-8848 High 7.2 Popup Maker – Boost Sales, Conversions, Optins, Subscribers with the Ultimate WP Popup Builder <= 1.22.0 - Missing Authorization to Authenticated (Editor+) Arbitrary Plugin Installation 1.2%
  • CVE-2025-9490 Medium 6.4 Popup Maker <= 1.20.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via title Parameter 0.3%
  • CVE-2025-4205 Medium 6.4 Popup Maker <= 1.20.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via popupID Parameter 0.3%
  • CVE-2024-11153 Medium 5.3 Content Control – The Ultimate Content Restriction Plugin! Restrict Content, Create Conditional Blocks & More <= 2.5.0 - Unauthenticated Content Restriction Bypass to Sensitive Information Exposure 0.4%
  • CVE-2024-10583 Medium 5.4 Popup Maker – Boost Sales, Conversions, Optins, Subscribers with the Ultimate WP Popups Builder <= 1.20.2 - Authenticated (Contributor+) Stored Cross-Site Scripting 0.3%
  • CVE-2024-7054 Medium 6.4 Popup Maker <= 1.19.0 - Authenticated (Contributor+) Stored Cross-Site Scripting 0.3%
  • CVE-2024-0615 Medium 5.3 Content Control <= 2.1.0 - Missing Authorization to Sensitive Information Exposure 0.5%
  • CVE-2024-2336 Medium 6.4 Popup Maker – Popup for opt-ins, lead gen, & more <= 1.18.2 - Authenticated (Contributor+) Stored Cross-Site Scripting 0.3%