Approved changes feed: RSS · Atom

cpe:2.3:a:supsystic:popup:*:*:*:*:*:wordpress:*:*

part: a version: * update: *

VendorSupsystic (31a63952-7184-5307-ada0-8934fe420f61)
ProductPopup (79f8152c-7c2e-551a-ade0-90f4c9664cd4)
Edition*
Language*
Software edition*
Target softwarewordpress
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-52434 vulnerable 2026-06-08 06:52:15.172133 WordPress Popup by Supsystic plugin <= 1.10.29 - Remote Code Execution (RCE) vulnerability
CRITICAL (9.1)
Deserialization of Untrusted Data vulnerability in supsystic Popup by Supsystic popup-by-supsystic allows Command Injection.This issue affects Popup by Supsystic: from n/a through <= 1.10.29.
Published: 2024-11-18T14:18:13.457Z
Updated: 2026-04-28T16:10:42.243Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-31421 vulnerable 2026-06-08 06:35:31.504893 WordPress Popup by Supsystic plugin <= 1.10.27 - Broken Access Control vulnerability
MEDIUM (4.3)
Missing Authorization vulnerability in supsystic Popup by Supsystic popup-by-supsystic.This issue affects Popup by Supsystic: from n/a through <= 1.10.27.
Published: 2024-04-15T10:09:53.469Z
Updated: 2026-04-28T16:09:32.132Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-51353 vulnerable 2026-06-08 06:16:17.350821 WordPress Popup by Supsystic plugin <= 1.10.19 - Broken Access Control vulnerability
MEDIUM (5.3)
Missing Authorization vulnerability in supsystic Popup by Supsystic popup-by-supsystic allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Popup by Supsystic: from n/a through <= 1.10.19.
Published: 2024-12-09T11:29:51.014Z
Updated: 2026-04-29T09:51:52.413Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-46197 vulnerable 2026-06-08 06:12:44.367033 WordPress Popup by Supsystic plugin <= 1.10.19 - Unauthenticated Subscriber Email Addresses Disclosure
MEDIUM (5.3)
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in supsystic.Com Popup by Supsystic allows Relative Path Traversal.This issue affects Popup by Supsystic: from n/a through 1.10.19.
Published: 2024-05-17T08:33:09.222Z
Updated: 2026-04-28T16:08:46.716Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-3186 vulnerable 2026-06-08 06:09:38.799625 Supsystic Popup < 1.10.19 - Prototype Pollution
The Popup by Supsystic WordPress plugin before 1.10.19 has a prototype pollution vulnerability that could allow an attacker to inject arbitrary properties into Object.prototype.
Published: 2023-07-17T13:29:50.962Z
Updated: 2024-10-30T15:04:57.116Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-39997 vulnerable 2026-06-08 06:09:38.265536 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-0424 vulnerable 2026-06-08 05:39:10.025842 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-24275 vulnerable 2026-06-08 05:30:04.104466 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-10915 vulnerable 2026-06-08 05:07:25.817344 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.