popup-maker vulnerabilities

CVEs whose affected-version data names the popup-maker package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-28177High· 7.1

2mo ago

WordPress Popup Maker plugin <= 1.23.0 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Code Atlantic LLC Popup Maker popup-maker allows DOM-Based XSS.This issue affects Popup Maker: from n/a through 1.23.0.

▾ TwilightCode Atlantic LLC · popup-makerEPSS 0.25%via CVEORG