Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Buy Us a Coffee

Popup builder with Gamification, Multi-Step Popups, Page-Level Targeting, and WooCommerce Triggers — Vulnerabilities & Security Advisories 5

All 5 CVE vulnerabilities found in Popup builder with Gamification, Multi-Step Popups, Page-Level Targeting, and WooCommerce Triggers, with AI-generated Chinese analysis, references, and POCs.

Vendor: roxnor

CVE IDTitleCVSSSeverityPublished
CVE-2025-14895 PopupKit <= 2.2.0 - Missing Authorization to Sensitive Information Disclosure and Data Deletion CWE-862 5.4 Medium2026-02-10
CVE-2025-13192 Popup builder with Gamification <= 2.2.0 - Unauthenticated SQL Injection via Multiple REST API Endpoints CWE-89 8.2 High2026-02-04
CVE-2025-14441 Popupkit <= 2.2.0 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Subscriber Data Deletion CWE-862 4.3 Medium2026-01-06
CVE-2025-10861 Popup builder with Gamification, Multi-Step Popups, Page-Level Targeting, and WooCommerce Triggers <= 2.1.4 - Unauthenticated Server-Side Request Forgery CWE-918 7.5 High2025-10-24
CVE-2025-10862 Popup builder with Gamification, Multi-Step Popups, Page-Level Targeting, and WooCommerce Triggers <= 2.1.3 - Unauthenticated SQL Injection via 'id' CWE-89 7.5 High2025-10-09

All 5 known CVE vulnerabilities affecting Popup builder with Gamification, Multi-Step Popups, Page-Level Targeting, and WooCommerce Triggers with full Chinese analysis, references, and POCs where available.