Approved changes feed: RSS · Atom

cpe:2.3:a:popup-builder:popup_builder:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorPopup Builder (eb02b181-b0a9-5629-a127-9ddce866824b)
ProductPopup Builder (a86f4742-7add-556f-b447-66410fe25590)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2019-25744 vulnerable 2026-06-08 05:13:43.066282 WordPress Popup Builder 3.49 Persistent Cross-Site Scripting
MEDIUM (5.4)
WordPress Popup Builder 3.49 contains a persistent cross-site scripting vulnerability that allows authenticated attackers to inject malicious scripts by breaking out of option tags in the post_title parameter. Attackers can submit crafted POST requests to the post.php endpoint with script payloads in the post_title field that execute when pages or posts display popup selections.
Published: 2026-06-04T13:22:47.587Z
Updated: 2026-07-15T01:24:13.891Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.