Melodicmedia Popover Windows
2 CVEs affecting Melodicmedia Popover Windows. Latest disclosed: 2025-12-13. Critical: 0, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2025-14395 | Medium | 4.3 | 2025-12-13 | The Popover Windows plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on multiple ajax actions (e.g., p… |
CVE-2025-14394 | Medium | 4.3 | 2025-12-13 | The Popover Windows plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.2. This is due to missing or incorrect… |