Simple Popup

2 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2023-24406 MEDIUM This Month

Auth. Rated medium severity (CVSS 4.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

XSS Simple Popup

NVD

CVSS 3.1

4.8

EPSS

0.4%

CVE-2014-3921 MEDIUM POC This Month

Cross-site scripting (XSS) vulnerability in popup.php in the Simple Popup Images plugin for WordPress allows remote attackers to inject arbitrary web script or HTML via the z parameter. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable. Public exploit code available and no vendor patch available.

XSS WordPress PHP Simple Popup

NVD

CVSS 2.0

4.3

EPSS

0.2%

CVE-2023-24406

EPSS 0% CVSS 4.8

MEDIUM This Month

Auth. Rated medium severity (CVSS 4.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

XSS Simple Popup

NVD

CVE-2014-3921

EPSS 0% CVSS 4.3

MEDIUM POC This Month

XSS WordPress PHP +1

NVD