Sygnoos vulnerabilities

Products

• Popup Builder 18
• Popup Builder (wordpress Plugin) 2
• Social Media Share Buttons 2
• Social Media Share Buttons 2

Newest

• ghozylab popup builder Popup Builder < 4.3.5 - Admin+ Stored XSS CVE-2024-9428 4.8 MediumDecember 12, 2024
• popup builder builder, sygnoos popup builder, popupbuilder popup builder – create highly converting, mobile friendly marketing popups. +2 more Popup Builder <= 4.3.6 - Sensitive Information Exposure via Imported Subscribers CSV File CVE-2024-2541 5.3 MediumAugust 29, 2024
• popupbuilder popup builder – create highly converting, mobile friendly marketing popups., sygnoos popup builder +1 more Popup Builder – Create highly converting, mobile friendly marketing popups <= 4.3.1 - Missing Authorization and Nonce Exposure CVE-2023-6696 8.1 HighJune 15, 2024
• sygnoos popup builder, popupbuilder popup builder – create highly converting, mobile friendly marketing popups. +1 more Popup Builder <= 4.3.0 - Missing Authorization in Multiple AJAX Actions CVE-2024-2544 7.4 HighJune 15, 2024
• social media share buttons by sygnoos media share buttons, sygnoos social media share buttons +1 more WordPress Social Media Share Buttons plugin <= 2.1.0 - PHP Object Injection vulnerability CVE-2024-2721 8.2 HighMarch 20, 2024
• sygnoos social media share buttons Social Media Share Buttons <= 2.1.0 - Authenticated (Subscriber+) PHP Object Injection CVE-2024-1685 8.8 HighMarch 16, 2024
• ghozylab popup builder, popup builder builder +1 more popup-builder < 4.2.6 - Admin+ SSRF & File Read CVE-2023-6294 7.2 HighFebruary 12, 2024
• ghozylab popup builder Popup Builder < 4.2.3 - Unauthenticated Stored XSS CVE-2023-6000 Public exploit 6.1 MediumJanuary 1, 2024
• ghozylab popup builder Popup Builder < 4.2.0 - Admin+ Stored Cross-Site Scripting CVE-2023-3226 4.8 MediumSeptember 25, 2023
• sygnoos popup builder, popup builder (wordpress plugin) +1 more WordPress Popup Builder plugin <= 4.1.11 - Cross-Site Request Forgery (CSRF) leading to plugin settings update CVE-2022-29495 5.4 MediumJuly 22, 2022
• sygnoos popup builder, popup builder (wordpress plugin) +1 more WordPress Popup Builder plugin <= 4.1.0 - Cross-Site Request Forgery (CSRF) vulnerability leading to Popup Status Change CVE-2022-32289 5.4 MediumJuly 21, 2022
• sygnoos popup builder, popupbuilder popup builder – create highly converting, mobile friendly marketing popups. +1 more Popup Builder < 4.1.11 - Admin+ Stored Cross-Site Scripting CVE-2022-1894 4.8 MediumJuly 11, 2022
• sygnoos popup builder, popupbuilder popup builder – create highly converting, mobile friendly marketing popups. +1 more Popup Builder < 4.1.1 - SQL Injection to Reflected Cross-Site Scripting CVE-2022-0479 EPSS 43.8% 9.8 CriticalMarch 28, 2022
• sygnoos popup builder, popupbuilder popup builder – create highly converting, mobile friendly marketing popups. +1 more Popup Builder < 4.0.7 - Admin+ SQL Injection CVE-2022-0228 7.2 HighFebruary 21, 2022
• sygnoos popup builder, popupbuilder popup builder – create highly converting, mobile friendly marketing popups. +1 more Popup Builder < 4.0.7 - LFI to RCE CVE-2021-25082 8.8 HighFebruary 21, 2022
• sygnoos popup builder, unknown popup builder – responsive wordpress pop up – subscription & newsletter +1 more Popup Builder < 3.74 - Authenticated Reflected Cross-Site Scripting (XSS) CVE-2021-24152 6.1 MediumApril 5, 2021
• sygnoos popup builder The popup-builder plugin before 3.64.1 for WordPress allows information disclosure and settings... CVE-2020-10195 6.3 MediumMarch 13, 2020
• sygnoos popup builder An XSS vulnerability in the popup-builder plugin before 3.64.1 for WordPress allows remote... CVE-2020-10196 6.1 MediumMarch 13, 2020
• sygnoos popup builder The Popup Builder plugin 2.2.8 through 2.6.7.6 for WordPress is vulnerable to SQL injection (in... CVE-2020-9006 Public exploit 9.8 CriticalFebruary 17, 2020
• sygnoos popup builder A SQL injection vulnerability exists in the Sygnoos Popup Builder plugin before 3.45 for... CVE-2019-14695 9.8 CriticalAugust 6, 2019