Timersys

6 CVEs across 4 Timersys products. Browse Timersys vulnerabilities, severities, and proof-of-concept exploits.

Timersys products with known CVEs

ProductCVEs
Wp Popups3
Wp Popups – WordPress Popup Builder2
Popups1
Wp Popups1
Timersys CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2024-6555Medium5.32024-07-12The WP Popups – WordPress Popup builder plugin for WordPress is vulnerable to Full Path Disclosure in all versions up to, and including, 2.2.0.1. This is due t…
CVE-2024-29105Medium5.92024-03-19Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Timersys WP Popups allows Stored XSS.This issue affects W…
CVE-2023-1905Medium5.42023-05-08The WP Popups WordPress plugin before 2.1.5.1 does not properly escape the href attribute of its spu-facebook-page shortcode before outputting it back in a pag…
CVE-2023-24003Medium6.52023-04-06Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in Timersys WP Popups – WordPress Popup plugin <= 2.1.4.8 versions.
CVE-2022-4716Medium5.42023-01-23The WP Popups WordPress plugin before 2.1.4.8 does not validate and escape some of its shortcode attributes before outputting them back in the page, which coul…
CVE-2022-2305Medium4.82022-08-01The WordPress Popup WordPress plugin through 1.9.3.8 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to…