Essentialplugin Popup Anything
3 CVEs affecting Essentialplugin Popup Anything. Latest disclosed: 2023-03-29. Critical: 0, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2022-2115 | Medium | 6.1 | 2022-07-25 | The Popup Anything WordPress plugin before 2.1.7 does not sanitise and escape a parameter before outputting it back in a frontend page, leading to a Reflected… |
CVE-2021-24883 | Medium | 5.4 | 2021-11-29 | The Popup Anything WordPress plugin before 2.0.4 does not escape the Link Text and Button Text fields of Popup, which could allow users with a role as low as C… |
CVE-2022-38077 | Medium | 4.3 | 2023-03-29 | Cross-Site Request Forgery (CSRF) vulnerability in WP OnlineSupport, Essential Plugin Popup Anything – A Marketing Popup and Lead Generation Conversions plugin… |