VendorsAYS Propopup_boxany version
Vulnerabilities

AYS Pro Popup Box any version

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

10CVEs
CVE-2021-24458
Popup box < 2.3.4 - Authenticated Blind SQL Injections
Published 2021-08-02 · Modified
8.8EPSS 0.014
CVE-2021-24460
Popup Like box - Page Plugin < 3.5.3 - Authenticated Blind SQL Injections
Published 2021-08-02 · Modified
8.8EPSS 0.014
CVE-2023-27414
WordPress Popup box Plugin <= 3.4.4 is vulnerable to Cross Site Scripting (XSS)
Published 2023-06-21 · Modified
7.1EPSS 0.004
CVE-2024-9599
Popup Box < 4.7.8 - Admin+ Stored XSS
Published 2025-05-15 · Analyzed
5.4EPSS 0.003
CVE-2025-15611
Popup Box AYS Pro < 5.5.0 - Admin+ Stored Cross-Site Scripting (XSS) via CSRF
Published 2026-04-07 · Analyzed
5.4EPSS 0.001
CVE-2023-6591
Popup Box Pro < 20.9.0 - Admin+ Stored XSS
Published 2024-02-12 · Modified
4.8EPSS 0.005
CVE-2023-5343
Popup Box < 3.7.9 - Admin+ Stored XSS
Published 2023-11-20 · Modified
4.8EPSS 0.005
CVE-2023-5809
Popup box < 3.8.6 - Admin+ Stored XSS in Categories
Published 2023-12-04 · Modified
4.8EPSS 0.005
CVE-2023-5874
Popup box < 3.8.6 - Admin+ Stored XSS in Popup Settings
Published 2023-12-04 · Modified
4.8EPSS 0.005
CVE-2023-4390
Popup box < 3.7.2 - Admin+ Stored Cross-Site Scripting
Published 2023-10-31 · Modified
4.8EPSS 0.004