popup_box_create_countdown_coupon_video_contact_form_popups vulnerabilities

CVEs whose affected-version data names the popup_box_create_countdown_coupon_video_contact_form_popups package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-100159Medium· 4.8

today

Popup Box 6.4.1 - 6.4.2 - Unauthenticated Arbitrary Shortcode Execution via Client-IP / X-Forwarded-For HTTP Headers

The Popup Box plugin for WordPress is vulnerable to Arbitrary Shortcode Execution in versions 6.4.1 to 6.4.2. This is due to the ays_popup_get_user_ip() function reading the client-controlled Client-IP / X-Forwarded-For / Forwarded / X-F…

▾ Sunlitays-pro · Popup Box – Create Countdown, Coupon, Video, Contact Form Popupsvia CVEORG