Skip to content
Popupbuilder vulnerabilities
Newest
-
popupbuilder popup builder – create highly converting, mobile friendly marketing popups.
Popup Builder <= 4.4.5 - Missing Authorization to Unauthenticated Arbitrary Popup Post Trashing via 'post_type' and 'sg_popup_preview_id' Parameters
CVE-2026-89270
9.1 Critical
-
popupbuilder popup builder – create highly converting, mobile friendly marketing popups.
Popup Builder - Create highly converting, mobile friendly marketing popups. <= 4.4.2 - Improper Authorization to Unauthenticated Subscriber Removal via Predictable Tokens
CVE-2025-13079
5.3 Medium
-
popupbuilder popup builder – create highly converting, mobile friendly marketing popups.
Popup Builder – Create highly converting, mobile friendly marketing popups. <= 4.4.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
CVE-2025-9856
6.4 Medium
-
popup builder builder, sygnoos popup builder, popupbuilder popup builder – create highly converting, mobile friendly marketing popups. +2 more
Popup Builder <= 4.3.6 - Sensitive Information Exposure via Imported Subscribers CSV File
CVE-2024-2541
5.3 Medium
-
popupbuilder popup builder – create highly converting, mobile friendly marketing popups., sygnoos popup builder +1 more
Popup Builder – Create highly converting, mobile friendly marketing popups <= 4.3.1 - Missing Authorization and Nonce Exposure
CVE-2023-6696
8.1 High
-
sygnoos popup builder, popupbuilder popup builder – create highly converting, mobile friendly marketing popups. +1 more
Popup Builder <= 4.3.0 - Missing Authorization in Multiple AJAX Actions
CVE-2024-2544
7.4 High
-
popupbuilder popup builder – create highly converting, mobile friendly marketing popups.
Popup Builder <= 4.2.7 - Authenticated(Contributor+) Stored Cross-Site Scripting via Custom JS
CVE-2024-2506
6.4 Medium
-
sygnoos popup builder, popupbuilder popup builder – create highly converting, mobile friendly marketing popups. +1 more
Popup Builder < 4.1.11 - Admin+ Stored Cross-Site Scripting
CVE-2022-1894
4.8 Medium
-
sygnoos popup builder, popupbuilder popup builder – create highly converting, mobile friendly marketing popups. +1 more
Popup Builder < 4.1.1 - SQL Injection to Reflected Cross-Site Scripting
CVE-2022-0479
EPSS 43.8%
9.8 Critical
-
sygnoos popup builder, popupbuilder popup builder – create highly converting, mobile friendly marketing popups. +1 more
Popup Builder < 4.0.7 - Admin+ SQL Injection
CVE-2022-0228
7.2 High
-
sygnoos popup builder, popupbuilder popup builder – create highly converting, mobile friendly marketing popups. +1 more
Popup Builder < 4.0.7 - LFI to RCE
CVE-2021-25082
8.8 High