What’s Vulnerable › Products
ays-pro Popup Box – Create Countdown, Coupon, Video, Contact Form Popups vulnerabilities
2 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 2 published in the last 12 months.
Latest ays-pro Popup Box – Create Countdown, Coupon, Video, Contact Form Popups vulnerabilities
- CVE-2026-100159 — Popup Box 6.4.1 - 6.4.2 - Unauthenticated Arbitrary Shortcode Execution via Client-IP / X-Forwarded-For HTTP Headers (CVSS 4.8)
- CVE-2026-1165 — Popup Box <= 6.1.1 - Cross-Site Request Forgery to Popup Status Change (CVSS 4.3)