Approved changes feed: RSS · Atom

cpe:2.3:a:unknown:popup_by_supsystic:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorUnknown (668ca391-a6cc-5e33-879b-83885214de33)
ProductPopup By Supsystic (1b2cb1a8-28b9-57d0-963e-7d22d61cf057)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-3186 vulnerable 2026-06-08 06:09:38.799569 Supsystic Popup < 1.10.19 - Prototype Pollution
The Popup by Supsystic WordPress plugin before 1.10.19 has a prototype pollution vulnerability that could allow an attacker to inject arbitrary properties into Object.prototype.
Published: 2023-07-17T13:29:50.962Z
Updated: 2024-10-30T15:04:57.116Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-0424 vulnerable 2026-06-08 05:39:10.025053 Popup by Supsystic < 1.10.9 - Unauthenticated Subscriber Email Addresses Disclosure
The Popup by Supsystic WordPress plugin before 1.10.9 does not have any authentication and authorisation in an AJAX action, allowing unauthenticated attackers to call it and get the email addresses of subscribed users
Published: 2022-05-09T16:50:28.000Z
Updated: 2024-08-02T23:25:40.455Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.