Skip to main content

Popup Maker CVE-2022-47597

MEDIUM
Information Exposure (CWE-200)
2023-12-20 audit@patchstack.com
Information Disclosure Popup Maker Code Atlantic
5.3
CVSS 3.1 · NVD
Share

Severity by source

NVD PRIMARY
5.3 MEDIUM
AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

Attack Vector
Network
Attack Complexity
Low
Privileges Required
None
User Interaction
None
Scope
Unchanged
Confidentiality
Low
Integrity
None
Availability
None

Lifecycle Timeline

1
CVE Published
Dec 20, 2023 - 18:15 cve.org
MEDIUM 5.3

DescriptionCVE.org

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Popup Maker Popup Maker - Popup for opt-ins, lead gen, & more.This issue affects Popup Maker - Popup for opt-ins, lead gen, & more: from n/a through 1.17.1.

AnalysisAI

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Popup Maker Popup Maker - Popup for opt-ins, lead gen, & more.17.1. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Technical ContextAI

This vulnerability is classified as Exposure of Sensitive Information (CWE-200), which allows attackers to access sensitive data that should not be disclosed. Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Popup Maker Popup Maker - Popup for opt-ins, lead gen, & more.17.1. Affected products include: Code-Atlantic Popup Maker. Version information: through 1.17.1..

RemediationAI

No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Minimize information in error messages, implement proper access controls, encrypt sensitive data at rest and in transit.

More in Popup Maker

View all
CVE-2019-17574 CRITICAL POC
9.1 Oct 14

An issue was discovered in the Popup Maker plugin before 1.8.13 for WordPress. Rated critical severity (CVSS 9.1), this

CVE-2024-5561 MEDIUM POC
4.8 Sep 09

The Popup Maker WordPress plugin before 1.19.1 does not sanitise and escape some of its settings, which could allow high
CVE-2022-3690 MEDIUM POC
4.8 Nov 21

The Popup Maker WordPress plugin before 1.16.11 does not sanitise and escape some of its Popup options, which could allo
CVE-2022-1104 MEDIUM POC
4.8 May 09

The Popup Maker WordPress plugin before 1.16.5 does not sanitise and escape some of its Popup settings, which could allo
CVE-2026-28177 HIGH
7.1 Aug 06

Unauthenticated Cross-Site Scripting in the Popup Maker WordPress plugin (versions up to and including 1.23.0) allows an
CVE-2025-24746 MEDIUM
6.5 Jan 24

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Popup Maker Popup

CVE-2024-2336 MEDIUM
6.4 Apr 09

The Popup Maker - Popup for opt-ins, lead gen, & more plugin for WordPress is vulnerable to Stored Cross-Site Scripting

CVE-2017-2284 MEDIUM
6.1 Aug 02

Cross-site scripting vulnerability in Popup Maker prior to version 1.6.5 allows remote attackers to inject arbitrary web
CVE-2024-47358 MEDIUM
5.3 Nov 01

Missing Authorization vulnerability in Daniel Iser Popup Maker popup-maker.19.2. Rated medium severity (CVSS 5.3), this

CVE-2024-10583 MEDIUM
5.4 Dec 12

The Popup Maker - Boost Sales, Conversions, Optins, Subscribers with the Ultimate WP Popups Builder plugin for WordPress
CVE-2024-7054 MEDIUM
5.4 Aug 20

The Popup Maker - Boost Sales, Conversions, Optins, Subscribers with the Ultimate WP Popups Builder plugin for WordPress
CVE-2022-45819 LOW
3.5 Dec 13

Missing Authorization vulnerability in Daniel Iser Popup Maker popup-maker allows Exploiting Incorrectly Configured Acce

Same weakness CWE-200 – Information Exposure

View all
CVE-2024-24919 HIGH POC
8.6
CVE-2016-6415 HIGH POC
7.5
CVE-2013-7331 MEDIUM POC
6.5
CVE-2025-31125 MEDIUM POC
5.3
CVE-2025-11749 CRITICAL POC
9.8
CVE-2017-16894 HIGH POC
7.5
CVE-2017-11165 CRITICAL POC
9.8
CVE-2020-3259 HIGH
7.5

Same technique Information Disclosure

View all
CVE-2019-2725 CRITICAL POC
9.8
CVE-2021-34523 CRITICAL POC
9.0
CVE-2013-2251 CRITICAL POC
9.8
CVE-2017-5638 CRITICAL POC
9.8
CVE-2025-24813 CRITICAL POC
9.8
CVE-2015-1701 HIGH POC
7.8
CVE-2017-0147 HIGH POC
7.5
CVE-2014-6324 HIGH POC
8.8

Share

CVE-2022-47597 vulnerability details – vuln.today
Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy