https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2025-24746.htmlhttps://patchthecve.com/cve/CVE-2025-24746.htmlWed, 17 Jun 2026 08:59:32 +0000MEDIUM 6.5: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Daniel Iser Popup Maker popup-maker allows Stored XSS.This issue affects Popup Maker: from n/a through <= 1.20.2.https://patchthecve.com/cve/CVE-2022-45819.htmlhttps://patchthecve.com/cve/CVE-2022-45819.htmlWed, 17 Jun 2026 05:10:48 +0000LOW 3.5: Missing Authorization vulnerability in Popup Maker Popup Maker allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Popup Maker: from n/a through 1.17.1.https://patchthecve.com/cve/CVE-2024-10583.htmlhttps://patchthecve.com/cve/CVE-2024-10583.htmlWed, 17 Jun 2026 06:55:58 +0000MEDIUM 5.4: The Popup Maker – Boost Sales, Conversions, Optins, Subscribers with the Ultimate WP Popups Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘post_title’ parameter in all versions up to, and including, 1.20.2 due to insufficient input sanitization and output escapinghttps://patchthecve.com/cve/CVE-2024-47358.htmlhttps://patchthecve.com/cve/CVE-2024-47358.htmlWed, 17 Jun 2026 07:56:56 +0000MEDIUM 5.3: Missing Authorization vulnerability in Daniel Iser Popup Maker popup-maker.This issue affects Popup Maker: from n/a through <= 1.19.2.https://patchthecve.com/cve/CVE-2024-5561.htmlhttps://patchthecve.com/cve/CVE-2024-5561.htmlWed, 17 Jun 2026 08:16:11 +0000MEDIUM 4.8: The Popup Maker WordPress plugin before 1.19.1 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup)https://patchthecve.com/cve/CVE-2024-7054.htmlhttps://patchthecve.com/cve/CVE-2024-7054.htmlWed, 17 Jun 2026 08:19:16 +0000MEDIUM 6.4: The Popup Maker – Boost Sales, Conversions, Optins, Subscribers with the Ultimate WP Popups Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘close_text’ parameter in all versions up to, and including, 1.19.0 due to insufficient input sanitization and output escaping