What’s Vulnerable › Products
wpcalc Modal Window – create popup modal window vulnerabilities
7 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 2 published in the last 12 months.
Check whether your wpcalc Modal Window – create popup modal window version is affected
Latest wpcalc Modal Window – create popup modal window vulnerabilities
- CVE-2025-0897 — Modal Window <= 6.1.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via iframeBox Shortcode (CVSS 5.4)
- CVE-2025-24717 — WordPress Modal Window Plugin <= 6.1.4 - Cross Site Request Forgery (CSRF) to Settings Change vulnerability (CVSS 8.8)
- CVE-2024-43346 — WordPress Modal Window – create popup modal window plugin <= 6.0.3 - Cross Site Scripting (XSS) vulnerability (CVSS 5.4)
- CVE-2024-3472 — Modal Window < 5.3.10 - Modal Deletion via CSRF (CVSS 5.9)
- CVE-2024-2457 — Modal Window – create popup modal window <= 5.3.8 - Authenticated(Contributor+) Stored Cross-Site Scripting via Shortcode (CVSS 5.4)
- CVE-2023-5161 — Modal Window <= 5.3.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode (CVSS 5.4)
- CVE-2021-25051 — Modal Window < 5.2.2 - RFI leading to RCE via CSRF (CVSS 8.8)