WordPress plugin
Popup Box – Create Countdown, Coupon, Video, Contact Form Popups security & vulnerabilities
No known unpatched vulnerabilities in the latest version
All 21 known vulnerabilities are fixed in the latest release. If you run an older version, update to null or newer.
- Critical0
- High2
- Medium19
- Low0
All Popup Box – Create Countdown, Coupon, Video, Contact Form Popups vulnerabilities
| Severity | Vulnerability | CVE | Published |
|---|---|---|---|
| High7.2 | Unauthenticated Stored Cross-Site Scripting <5.5.0Update to 5.5.0 | CVE-2025-15611 | |
| High8.8 | Authenticated SQL Injection <2.3.4Update to 2.3.4 | CVE-2021-24458 |
- High7.2Unauthenticated Stored Cross-Site Scripting
<5.5.0Update to 5.5.0
- High8.8Authenticated SQL Injection
<2.3.4Update to 2.3.4
Popup Box – Create Countdown, Coupon, Video, Contact Form Popups: common questions
Does Popup Box – Create Countdown, Coupon, Video, Contact Form Popups have known vulnerabilities?
Yes. VulnCrest Radar lists 21 known vulnerabilities in Popup Box – Create Countdown, Coupon, Video, Contact Form Popups: 2 high, 19 medium. None are known to affect version null.
How do I check which version of Popup Box – Create Countdown, Coupon, Video, Contact Form Popups I run?
In wp-admin open Plugins → Installed Plugins; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.
What is the most recent Popup Box – Create Countdown, Coupon, Video, Contact Form Popups vulnerability?
CVE-2026-100159, published Oct 15, 2026: Popup Box 6.4.1 - 6.4.2 - Unauthenticated Arbitrary Shortcode Execution via Client-IP / X-Forwarded-For HTTP Headers. Severity: Medium (CVSS 4.8).
Is any Popup Box – Create Countdown, Coupon, Video, Contact Form Popups vulnerability listed in CISA KEV?
No. None of the known Popup Box – Create Countdown, Coupon, Video, Contact Form Popups vulnerabilities is currently listed in the CISA KEV catalog.