GCVE - cpe:2.3:a:magneticlab:homepage_pop-up:*:*:*:*:*:wordpress:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:magneticlab:homepage_pop-up:*:*:*:*:*:wordpress:*:*

part: a version: * update: *

Vendor	Magneticlab (`3c3a76a6-ea0a-5ab5-b830-dc9769014c9e`)
Product	Homepage Pop Up (`77d3a1fe-37f1-59cd-a7d9-5bc294dfe106`)
Edition	*
Language	*
Software edition	*
Target software	wordpress
Target hardware	*
Other	*

Notes

Imported from purl2cpe mapping

PURL	Source	Last updated
`pkg:github/wp-plugins/homepage-pop-up`	purl2cpe	2026-06-01 10:16:53.166095
`pkg:github/wpplugins/homepage-pop-up`	purl2cpe	2026-06-01 10:16:53.166097

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2022-44585`	vulnerable	2026-06-08 05:49:35.674230	WordPress Homepage Pop-up Plugin <= 1.2.5 is vulnerable to Cross Site Request Forgery (CSRF) MEDIUM (5.4) Cross-Site Request Forgery (CSRF) vulnerability in Magneticlab Sàrl Homepage Pop-up plugin <= 1.2.5 versions. Published: 2023-02-02T15:52:02.903Z Updated: 2026-04-28T16:07:51.347Z Open on db.gcve.eu Reference links https://patchstack.com/database/vulnerability/homepage-pop-up/wordpress-homepage-popup-plugin-1-2-5-cross-site-request-forgery-csrf-vulnerability?_s_id=cve	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-43480`	vulnerable	2026-06-08 05:49:32.115047	WordPress Homepage Pop-up Plugin <= 1.2.5 is vulnerable to Cross Site Scripting (XSS) MEDIUM (6.1) Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Magneticlab Sàrl Homepage Pop-up plugin <= 1.2.5 versions. Published: 2023-04-16T08:20:39.876Z Updated: 2026-04-28T16:07:50.867Z Open on db.gcve.eu Reference links https://patchstack.com/database/vulnerability/homepage-pop-up/wordpress-homepage-pop-up-plugin-1-2-5-unauth-stored-cross-site-scripting-xss-vulnerability?_s_id=cve	Imported from gcve-enriched-dumps CVE data

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.