All 3 CVE vulnerabilities found in Popup Box – Create Countdown, Coupon, Video, Contact Form Popups, with AI-generated Chinese analysis, references, and POCs.
Vendor: ays-pro
| CVE ID | Title | CVSS | Severity | Published |
|---|---|---|---|---|
| CVE-2026-1165 | Popup Box <= 6.1.1 - Cross-Site Request Forgery to Popup Status Change CWE-352 | 4.3 | Medium | 2026-01-31 |
| CVE-2024-10861 | Popup Box – Create Countdown, Coupon, Video, Contact Form Popups <= 4.9.7 - Missing Authorization to Unauthenticated Limited Options Update CWE-862 | 5.3 | Medium | 2024-11-16 |
| CVE-2024-3897 | Popup Box – Best WordPress Popup Plugin <= 4.3.6 - Missing Authorization to Information Exposure CWE-862 | 5.3 | Medium | 2024-05-02 |
All 3 known CVE vulnerabilities affecting Popup Box – Create Countdown, Coupon, Video, Contact Form Popups with full Chinese analysis, references, and POCs where available.