Approved changes feed: RSS · Atom

cpe:2.3:a:timed_popup_project:timed_popup:1.3:*:*:*:wordpress:*:*:*

part: a version: 1.3 update: *

VendorTimed Popup Project (d8e6edd2-bb93-513d-89b7-0546cacd7f49)
ProductTimed Popup (3befe0bd-3697-5a69-a2fd-56099e01501c)
Edition*
Language*
Software editionwordpress
Target software*
Target hardware*
Other*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2014-9525 vulnerable 2026-06-08 05:06:12.107237 Details available
Multiple cross-site request forgery (CSRF) vulnerabilities in the Timed Popup (wp-timed-popup) plugin 1.3 for WordPress allow remote attackers to hijack the authentication of administrators for requests that (1) change plugin settings via unspecified vectors or (2) conduct cross-site scripting (XSS) attacks via the sc_popup_subtitle parameter in the wp-popup.php page to wp-admin/options-general.php.
Published: 2015-01-05T20:00:00.000Z
Updated: 2024-08-06T13:47:41.717Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.