Popup Manager Project Popup Manager — known CVE vulnerabilities
Every CVE whose affected-product data names Popup Manager Project Popup Manager, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.
CVEs (2)
CVE-2022-4124 — CVSS 4.3 (medium): The Popup Manager WordPress plugin through 1.6.6 does not have authorisation and CSRF checks when deleting popups, which could allow…
CVE-2022-4125 — CVSS 4.3 (medium): The Popup Manager WordPress plugin through 1.6.6 does not have authorisation and CSRF check when creating/updating popups, and is missing…