melodicmedia
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| Popover Windows | 2 | – | Dec 13, 2025 |
Exploited and recent CVEs
- CVE-2025-14394 Popover Windows <= 1.2 - Cross-Site Request Forgery to Arbitrary Popover Configuration Update 0.1%
- CVE-2025-14395 Popover Windows <= 1.2 - Missing Authorization to Authenticated (Subscriber+) Popover Configuration Update via AJAX Actions 0.2%