Popup Manager
Approved changes feed: RSS · Atom
cpe:2.3:a:popup_manager_project:popup_manager:*:*:*:*:*:wordpress:*:*part: a version: * update: *
| Vendor | Popup Manager Project (8cbd682d-0ef1-59b5-b7f6-8882651f6df5) |
|---|---|
| Product | Popup Manager (71872ea0-2aae-5679-8e8e-35bedc36a7b4) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | wordpress |
| Target hardware | * |
| Other | * |
Notes
Imported from purl2cpe mapping
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:github/wpplugins/popup-manager |
purl2cpe | 2026-06-01 10:17:54.608832 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2022-4125 |
vulnerable | 2026-06-08 05:51:36.812899 |
Popup Manager <= 1.6.6 - Unauthenticated Stored XSS
The Popup Manager WordPress plugin through 1.6.6 does not have authorisation and CSRF check when creating/updating popups, and is missing sanitisation as well as escaping, which could allow unauthenticated attackers to create arbitrary popups and add Stored XSS payloads as well
Published: 2022-12-19T13:41:50.163Z
Updated: 2024-08-03T01:27:54.511Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-4124 |
vulnerable | 2026-06-08 05:51:36.812532 |
Popup Manager <= 1.6.6 - Unauthenticated Arbitrary Popup Deletion
The Popup Manager WordPress plugin through 1.6.6 does not have authorisation and CSRF checks when deleting popups, which could allow unauthenticated users to delete them
Published: 2022-12-19T13:41:48.505Z
Updated: 2025-04-14T18:14:00.896Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.