Skip to content
Roxnor Popup builder with Gamification, Multi-Step Popups, Page-Level Targeting, and WooCommerce Triggers
-
CVE-2025-14895
Medium 5.4
PopupKit <= 2.2.0 - Missing Authorization to Sensitive Information Disclosure and Data Deletion
0.3%
-
CVE-2025-13192
High 8.2
Popup builder with Gamification <= 2.2.0 - Unauthenticated SQL Injection via Multiple REST API Endpoints
0.4%
-
CVE-2025-14441
Medium 4.3
Popupkit <= 2.2.0 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Subscriber Data Deletion
0.2%
-
CVE-2025-10861
High 7.5
Popup builder with Gamification, Multi-Step Popups, Page-Level Targeting, and WooCommerce Triggers <= 2.1.4 - Unauthenticated Server-Side Request Forgery
0.4%
-
CVE-2025-10862
High 7.5
Popup builder with Gamification, Multi-Step Popups, Page-Level Targeting, and WooCommerce Triggers <= 2.1.3 - Unauthenticated SQL Injection via 'id'
0.4%