Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%

Buy Us a Coffee

Popup Maker 2.1.4 Deserialization RCE: Analysis & PoC

www.wordfence.com 2026-09-19 查看中文 →

Security Advisory High Popup Maker

Affected:

WordPress plugin Popup Maker 2.1.4

Fixed in:

2.1.5

Referenced CVEs: CVE-2026-1255 · 7.5

文章内图片已隐藏以节省流量 · Upgrade to Pro to view images & offline archive

This content was auto-fetched from www.wordfence.com, cleaned by our LLM pipeline, and translated to English. View original.

More from this source

GoPay for WooCommerce <= 1.0.36 Authenticated SQL Injection (CVE-2026-75999) 2026-09-19 Search Atlas SEO Plugin Privilege Escalation via Unauthenticated delete_post Function 2026-09-19 Real 3D Flipbook CVE-2026-15998 Authenticated Stored XSS via lightboxtext Shortcode 2026-09-19 Unauthenticated Open Redirect in Hide My WP Ghost Plugin (CVE-2026-7527) 2026-09-19 WP Customer Reviews Plugin CSRF Vulnerability (CVSS 5.9) 2026-09-19

Offline Archive

Offline screenshot & PDF are Pro-exclusive

Upgrade to Pro