Unknown Popup Box vulnerabilities

• ays pro popup box WordPress Popup box plugin <= 6.0.1 - SQL Injection vulnerability CVE-2026-57631 7.6 HighJune 26, 2026
• ays pro popup box WordPress Popup box plugin <= 6.2.9 - Reflected Cross Site Scripting (XSS) vulnerability CVE-2026-54192 7.1 HighJune 17, 2026
• ays-pro popup box Popup Box AYS Pro < 5.5.0 - Admin+ Stored Cross-Site Scripting (XSS) via CSRF CVE-2025-15611 5.4 MediumApril 7, 2026
• ays pro popup box WordPress Popup box plugin <= 6.0.7 - Cross Site Request Forgery (CSRF) vulnerability CVE-2025-69021 5.4 MediumDecember 30, 2025
• ays pro popup box WordPress Popup box plugin <= 5.5.4 - Cross Site Request Forgery (CSRF) vulnerability CVE-2025-57931 5.3 MediumOctober 29, 2025
• ays-pro popup box Popup Box < 4.7.8 - Admin+ Stored XSS CVE-2024-9599 5.4 MediumMay 15, 2025
• unknown popup box WordPress Popup Box Plugin <= 3.2.4 - Cross Site Request Forgery (CSRF) vulnerability CVE-2025-24711 5.4 MediumJanuary 24, 2025
• popup box team box, unknown popup box +1 more WordPress Popup box plugin <= 4.5.1 - Broken Access Control vulnerability CVE-2024-37096 4.3 MediumNovember 1, 2024
• popup box team box, unknown popup box +1 more WordPress Popup Box plugin <= 4.1.2 - CSRF to XSS vulnerability CVE-2024-34367 7.1 HighMay 6, 2024
• unknown popup box Popup Box < 2.2.7 - Popup Deletion via CSRF CVE-2024-3477 4.3 MediumMay 2, 2024
• ays-pro popup box Popup Box Pro < 20.9.0 - Admin+ Stored XSS CVE-2023-6591 4.8 MediumFebruary 12, 2024
• ays-pro popup box Popup box < 3.8.6 - Admin+ Stored XSS in Categories CVE-2023-5809 4.8 MediumDecember 4, 2023
• ays-pro popup box Popup box < 3.8.6 - Admin+ Stored XSS in Popup Settings CVE-2023-5874 4.8 MediumDecember 4, 2023
• ays-pro popup box Popup Box < 3.7.9 - Admin+ Stored XSS CVE-2023-5343 4.8 MediumNovember 20, 2023
• ays-pro popup box Popup box < 3.7.2 - Admin+ Stored Cross-Site Scripting CVE-2023-4390 4.8 MediumOctober 31, 2023
• ays-pro popup box, popup box team box +1 more WordPress Popup box Plugin <= 3.4.4 is vulnerable to Cross Site Scripting (XSS) CVE-2023-27414 7.1 HighJune 21, 2023
• unknown bubble menu, button generator, calculator builder +10 more +12 more Multiple Plugins from Wow-Company - Reflected XSS CVE-2023-2362 6.1 MediumJune 12, 2023
• ays pro popup box Popup box < 2.3.4 - Authenticated Blind SQL Injections CVE-2021-24458 8.8 HighAugust 2, 2021