Approved changes feed: RSS · Atom

cpe:2.3:a:supsystic:popup_by_supsystic:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorSupsystic (31a63952-7184-5307-ada0-8934fe420f61)
ProductPopup By Supsystic (75e8f810-f35d-5c3c-8fbc-e12b532eb238)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-52434 vulnerable 2026-06-03 14:57:29.518994 WordPress Popup by Supsystic plugin <= 1.10.29 - Remote Code Execution (RCE) vulnerability
CRITICAL (9.1)
Deserialization of Untrusted Data vulnerability in supsystic Popup by Supsystic popup-by-supsystic allows Command Injection.This issue affects Popup by Supsystic: from n/a through <= 1.10.29.
Published: 2024-11-18T14:18:13.457Z
Updated: 2026-04-28T16:10:42.243Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-31421 vulnerable 2026-06-03 14:55:39.699925 WordPress Popup by Supsystic plugin <= 1.10.27 - Broken Access Control vulnerability
MEDIUM (4.3)
Missing Authorization vulnerability in supsystic Popup by Supsystic popup-by-supsystic.This issue affects Popup by Supsystic: from n/a through <= 1.10.27.
Published: 2024-04-15T10:09:53.469Z
Updated: 2026-04-28T16:09:32.132Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-51353 vulnerable 2026-06-03 14:53:32.005432 WordPress Popup by Supsystic plugin <= 1.10.19 - Broken Access Control vulnerability
MEDIUM (5.3)
Missing Authorization vulnerability in supsystic Popup by Supsystic popup-by-supsystic allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Popup by Supsystic: from n/a through <= 1.10.19.
Published: 2024-12-09T11:29:51.014Z
Updated: 2026-04-29T09:51:52.413Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-39997 vulnerable 2026-06-03 14:52:39.662416 WordPress Popup by Supsystic plugin <= 1.10.19 - Broken Access Control Vulnerability
MEDIUM (5.3)
Missing Authorization vulnerability in supsystic.com Popup by Supsystic allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Popup by Supsystic: from n/a through 1.10.19.
Published: 2024-12-13T14:24:01.310Z
Updated: 2026-04-28T16:08:35.733Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-24275 vulnerable 2026-06-03 14:43:56.691940 Popup by Supsystic < 1.10.5 - Reflected Cross-Site scripting (XSS)
The Popup by Supsystic WordPress plugin before 1.10.5 did not sanitise the tab parameter of its options page before outputting it in an attribute, leading to a reflected Cross-Site Scripting issue
Published: 2021-05-05T18:28:48.000Z
Updated: 2024-08-03T19:28:23.280Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.