What’s Vulnerable › Products
supsystic Popup by Supsystic vulnerabilities
14 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 7 published in the last 12 months.
Check whether your supsystic Popup by Supsystic version is affected
Latest supsystic Popup by Supsystic vulnerabilities
- CVE-2026-102398 — WordPress Popup by Supsystic plugin <= 1.13.1 - Cross Site Scripting (XSS) vulnerability (CVSS 7.1)
- CVE-2026-73381 — WordPress Popup by Supsystic plugin <= 1.13.0 - Broken Authentication vulnerability (CVSS 9.1)
- CVE-2026-73380 — WordPress Popup by Supsystic plugin <= 1.13.0 - PHP Object Injection vulnerability (CVSS 9.8)
- CVE-2026-27537 — WordPress Popup by Supsystic plugin <= 1.11.2 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5)
- CVE-2023-39997 — WordPress Popup by Supsystic plugin <= 1.10.19 - Broken Access Control Vulnerability (CVSS 9.8)
- CVE-2023-51353 — WordPress Popup by Supsystic plugin <= 1.10.19 - Broken Access Control vulnerability (CVSS 9.8)
- CVE-2024-52434 — WordPress Popup by Supsystic plugin <= 1.10.29 - Remote Code Execution (RCE) vulnerability (CVSS 9.1)
- CVE-2023-46197 — WordPress Popup by Supsystic plugin <= 1.10.19 - Unauthenticated Subscriber Email Addresses Disclosure (CVSS 6.5)
- CVE-2024-31421 — WordPress Popup by Supsystic plugin <= 1.10.27 - Broken Access Control vulnerability (CVSS 4.3)
- CVE-2023-3186 — Supsystic Popup < 1.10.19 - Prototype Pollution (CVSS 9.8)
- CVE-2017-20065 — Supsystic Popup Plugin cross-site request forgery (CVSS 4.3)
- CVE-2022-0424 — Popup by Supsystic < 1.10.9 - Unauthenticated Subscriber Email Addresses Disclosure (CVSS 5.3)
- CVE-2021-24275 — Popup by Supsystic < 1.10.5 - Reflected Cross-Site scripting (XSS) (CVSS 6.1)
- CVE-2016-10915 — (CVSS 8.8)