Ppopupbuilder

Products

Exploited and recent CVEs

• CVE-2026-89270 Critical 9.1 Popup Builder <= 4.4.5 - Missing Authorization to Unauthenticated Arbitrary Popup Post Trashing via 'post_type' and 'sg_popup_preview_id' Parameters 0.4%
• CVE-2025-13079 Medium 5.3 Popup Builder - Create highly converting, mobile friendly marketing popups. <= 4.4.2 - Improper Authorization to Unauthenticated Subscriber Removal via Predictable Tokens 0.4%
• CVE-2025-9856 Medium 6.4 Popup Builder – Create highly converting, mobile friendly marketing popups. <= 4.4.1 - Authenticated (Contributor+) Stored Cross-Site Scripting 0.3%
• CVE-2024-2541 Medium 5.3 Popup Builder <= 4.3.6 - Sensitive Information Exposure via Imported Subscribers CSV File 0.6%
• CVE-2023-6696 High 8.1 Popup Builder – Create highly converting, mobile friendly marketing popups <= 4.3.1 - Missing Authorization and Nonce Exposure 0.5%
• CVE-2024-2544 High 7.4 Popup Builder <= 4.3.0 - Missing Authorization in Multiple AJAX Actions 0.3%
• CVE-2024-2506 Medium 6.4 Popup Builder <= 4.2.7 - Authenticated(Contributor+) Stored Cross-Site Scripting via Custom JS 0.3%