Skip to content
Noroxi

Popup box

ays-popup-box · plugin

Known security vulnerabilities for Popup box. Find out in seconds which version runs on your site with WP Lens.

10 known vulnerabilities

latest Jun 26, 2026

Vulnerabilities

  • CVE-2026-57631

    WordPress Popup box plugin <= 6.0.1 - SQL Injection vulnerability

    High 7.6

  • CVE-2026-54192

    WordPress Popup box plugin <= 6.2.9 - Reflected Cross Site Scripting (XSS) vulnerability

    High 7.1

  • CVE-2024-34367

    WordPress Popup Box plugin <= 4.1.2 - CSRF to XSS vulnerability

    High 7.1

  • CVE-2023-27414

    WordPress Popup box Plugin <= 3.4.4 is vulnerable to Cross Site Scripting (XSS)

    Medium 6.1

  • CVE-2025-69021

    WordPress Popup box plugin <= 6.0.7 - Cross Site Request Forgery (CSRF) vulnerability

    Medium 5.4

  • CVE-2025-57931

    WordPress Popup box plugin <= 5.5.4 - Cross Site Request Forgery (CSRF) vulnerability

    Medium 5.3

  • CVE-2024-10861

    Popup Box – Create Countdown, Coupon, Video, Contact Form Popups <= 4.9.7 - Missing Authorization to Unauthenticated Limited Options Update

    Medium 5.3

  • CVE-2024-3897

    Popup Box – Best WordPress Popup Plugin <= 4.3.6 - Missing Authorization to Information Exposure

    Medium 5.3

  • CVE-2026-1165

    Popup Box <= 6.1.1 - Cross-Site Request Forgery to Popup Status Change

    Medium 4.3

  • CVE-2024-37096

    WordPress Popup box plugin <= 4.5.1 - Broken Access Control vulnerability

    Medium 4.3

← Back to directory