danieliser Popup Maker – Boost Sales, Conversions, Optins, Subscribers with the Ultimate WP Popup Builder

• CVE-2026-87915 High 7.2 Popup Maker <= 1.24.0 - Unauthenticated Stored Cross-Site Scripting via values[Name] Parameter 0.5%
• CVE-2026-15797 Medium 6.4 Popup Maker <= 1.24.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via post_title 0.4%
• CVE-2026-8848 High 7.2 Popup Maker – Boost Sales, Conversions, Optins, Subscribers with the Ultimate WP Popup Builder <= 1.22.0 - Missing Authorization to Authenticated (Editor+) Arbitrary Plugin Installation 1.2%
• CVE-2025-9490 Medium 6.4 Popup Maker <= 1.20.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via title Parameter 0.3%
• CVE-2025-4205 Medium 6.4 Popup Maker <= 1.20.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via popupID Parameter 0.3%
• CVE-2024-10583 Medium 5.4 Popup Maker – Boost Sales, Conversions, Optins, Subscribers with the Ultimate WP Popups Builder <= 1.20.2 - Authenticated (Contributor+) Stored Cross-Site Scripting 0.3%
• CVE-2024-7054 Medium 6.4 Popup Maker <= 1.19.0 - Authenticated (Contributor+) Stored Cross-Site Scripting 0.3%
• CVE-2024-2336 Medium 6.4 Popup Maker – Popup for opt-ins, lead gen, & more <= 1.18.2 - Authenticated (Contributor+) Stored Cross-Site Scripting 0.3%