Themehunk Wp_popup_builder
4 CVEs affecting Themehunk Wp_popup_builder. Latest disclosed: 2025-10-27. Critical: 0, High: 1.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2024-9061 | High | 7.3 | 2024-10-16 | The The WP Popup Builder – Popup Forms and Marketing Lead Generation plugin for WordPress is vulnerable to arbitrary shortcode execution via the wp_ajax_nopriv… |
CVE-2022-2404 | Medium | 6.1 | 2022-09-26 | The WP Popup Builder WordPress plugin before 1.2.9 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross… |
CVE-2025-62902 | Medium | 5.3 | 2025-10-27 | Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in ThemeHunk WP Popup Builder wp-popup-builder allows Retrieve Embedde… |
CVE-2022-2405 | Medium | 4.3 | 2022-09-26 | The WP Popup Builder WordPress plugin before 1.2.9 does not have authorisation and CSRF check in an AJAX action, allowing any authenticated users, such as subs… |