Timersys Wp Popups — known CVE vulnerabilities

Every CVE whose affected-product data names Timersys Wp Popups, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (3)

• CVE-2023-24003 — CVSS 6.5 (medium): Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in Timersys WP Popups – WordPress Popup plugin <= 2.1.4.8 versions.
• CVE-2022-4716 — CVSS 5.4 (medium): The WP Popups WordPress plugin before 2.1.4.8 does not validate and escape some of its shortcode attributes before outputting them back in…
• CVE-2023-1905 — CVSS 5.4 (medium): The WP Popups WordPress plugin before 2.1.5.1 does not properly escape the href attribute of its spu-facebook-page shortcode before…