PatchTheCVEpopup builder vulnerabilities and fixes
Recent CVEs affecting popup builder, with upgrade or downgrade steps. 6 tracked.
Also searched as: popupbuilder.
popup builder has 6 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 6. Most recent: 2024-12-12. Highest priority: CVE-2023-6696 (score 39/100).
- CVE-2024-9428 MEDIUM 4.8 UPGRADE The Popup Builder WordPress plugin before 4.3.5 does not sanitise and escape some of its settings, which coul
- CVE-2024-3602 MEDIUM 4.3 UPGRADE The Pop ups, Exit intent popups, email popups, banners, bars, countdowns and cart savers – Promolayer plugin f
- CVE-2024-3236 MEDIUM 5.4 UPGRADE The Popup Builder WordPress plugin before 1.1.33 does not sanitise and escape some of its Notification fields,
- CVE-2024-2544 HIGH 7.4 UPGRADE The Popup Builder plugin for WordPress is vulnerable to unauthorized modification of data and loss of data due
- CVE-2024-2541 MEDIUM 5.3 UPGRADE The Popup Builder plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to,
- CVE-2023-6696 HIGH 8.1 UPGRADE The Popup Builder – Create highly converting, mobile friendly marketing popups
FAQ
How do I fix popup builder vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is popup builder being exploited right now?
None of the tracked popup builder CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which popup builder CVE should I patch first?
CVE-2023-6696 currently ranks highest (39/100): The Popup Builder – Create highly converting, mobile friendly marketing popups.