popupbuilder Popup Builder – Create highly converting, mobile friendly marketing popups.
7 published vulnerabilities name this product.
As the CNAs write it in their CVE records (vendor and product); the versions are theirs.
| CVE | Vulnerable versions | Title | Severity | Published | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2026-89270 | ≤ 4.4.5 | Popup Builder <= 4.4.5 - Missing Authorization to Unauthenticated Arbitrary Popup Post Trashing via 'post_type' and 'sg_popup_preview_id'… | CRITICAL 9.1 | 0.4 % | ||
| CVE-2025-13079 | ≤ 4.4.2 | Popup Builder - Create highly converting, mobile friendly marketing popups. <= 4.4.2 - Improper Authorization to Unauthenticated Subscrib… | MEDIUM 5.3 | 0.4 % | ||
| CVE-2025-9856 | ≤ 4.4.1 | Popup Builder – Create highly converting, mobile friendly marketing popups. <= 4.4.1 - Authenticated (Contributor+) Stored Cross-Site Scr… | MEDIUM 6.4 | 0.3 % | ||
| CVE-2024-2541 | ≤ 4.3.6 | Popup Builder <= 4.3.6 - Sensitive Information Exposure via Imported Subscribers CSV File | HIGH 7.5 | 0.6 % | ||
| CVE-2023-6696 | ≤ 4.3.1 | Popup Builder – Create highly converting, mobile friendly marketing popups <= 4.3.1 - Missing Authorization and Nonce Exposure | HIGH 8.1 | 0.5 % | ||
| CVE-2024-2544 | ≤ 4.3.0 | Popup Builder <= 4.3.0 - Missing Authorization in Multiple AJAX Actions | HIGH 7.4 | 0.3 % | ||
| CVE-2024-2506 | ≤ 4.2.7 | Popup Builder <= 4.2.7 - Authenticated(Contributor+) Stored Cross-Site Scripting via Custom JS | MEDIUM 6.4 | 0.3 % |