Skip to content

Supsystic Popup vulnerabilities

supsystic popup by supsysticWordPress Popup by Supsystic plugin <= 1.13.1 - Cross Site Scripting (XSS) vulnerabilityCVE-2026-1023987.1 HighSeptember 30, 2026
supsystic popup by supsysticWordPress Popup by Supsystic plugin <= 1.13.0 - Broken Authentication vulnerabilityCVE-2026-733819.1 CriticalAugust 18, 2026
supsystic popup by supsysticWordPress Popup by Supsystic plugin <= 1.13.0 - PHP Object Injection vulnerabilityCVE-2026-733809.8 CriticalAugust 18, 2026
supsystic popup by supsysticWordPress Popup by Supsystic plugin <= 1.11.2 - Cross Site Scripting (XSS) vulnerabilityCVE-2026-275376.5 MediumAugust 13, 2026
supsystic popup, popup by supsystic +1 moreWordPress Popup by Supsystic plugin <= 1.10.19 - Broken Access Control VulnerabilityCVE-2023-399975.3 MediumDecember 13, 2024
supsystic popup, popup by supsystic +1 moreWordPress Popup by Supsystic plugin <= 1.10.19 - Broken Access Control vulnerabilityCVE-2023-513535.3 MediumDecember 9, 2024
supsystic popup, popup by supsystic +1 moreWordPress Popup by Supsystic plugin <= 1.10.29 - Remote Code Execution (RCE) vulnerabilityCVE-2024-524349.1 CriticalNovember 18, 2024
supsystic popup, popup by supsystic +1 moreWordPress Popup by Supsystic plugin <= 1.10.19 - Unauthenticated Subscriber Email Addresses DisclosureCVE-2023-46197Public exploit5.3 MediumMay 17, 2024
supsystic popup, popup by supsystic +1 moreWordPress Popup by Supsystic plugin <= 1.10.27 - Broken Access Control vulnerabilityCVE-2024-314214.3 MediumApril 15, 2024
supsystic popup, popup by supsystic +1 moreSupsystic Popup < 1.10.19 - Prototype PollutionCVE-2023-31869.8 CriticalJuly 17, 2023
supsystic popup, popup plugin +1 moreSupsystic Popup Plugin cross-site request forgeryCVE-2017-200654.3 MediumJune 20, 2022
supsystic popup, popup by supsystic +1 morePopup by Supsystic < 1.10.9 - Unauthenticated Subscriber Email Addresses DisclosureCVE-2022-04245.3 MediumMay 9, 2022
supsystic popup, popup by supsystic +1 morePopup by Supsystic < 1.10.5 - Reflected Cross-Site scripting (XSS)CVE-2021-24275Public exploitEPSS 18.2%6.1 MediumMay 5, 2021
supsystic popupThe popup-by-supsystic plugin before 1.7.9 for WordPress has CSRF.CVE-2016-109158.8 HighAugust 20, 2019