Filtered by vendor Essentialplugin Subscriptions
Filtered by product Popup Anything Subscriptions
Total 3 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2021-24883 1 Essentialplugin 1 Popup Anything 2024-08-03 5.4 Medium
The Popup Anything WordPress plugin before 2.0.4 does not escape the Link Text and Button Text fields of Popup, which could allow users with a role as low as Contributor to perform Cross-Site Scripting attacks
CVE-2022-38077 1 Essentialplugin 1 Popup Anything 2024-08-03 4.3 Medium
Cross-Site Request Forgery (CSRF) vulnerability in WP OnlineSupport, Essential Plugin Popup Anything – A Marketing Popup and Lead Generation Conversions plugin <= 2.2.1 versions.
CVE-2022-2115 1 Essentialplugin 1 Popup Anything 2024-08-03 6.1 Medium
The Popup Anything WordPress plugin before 2.1.7 does not sanitise and escape a parameter before outputting it back in a frontend page, leading to a Reflected Cross-Site Scripting