5.4
Medium
CVE-2025-69021 Cross-Site Request Forgery (CSRF) vulnerability in Ays Pro Popup box ays-popup-box allows Cross Site Request…
Description
Cross-Site Request Forgery (CSRF) vulnerability in Ays Pro Popup box ays-popup-box allows Cross Site Request Forgery.This issue affects Popup box: from n/a through <= 6.0.7.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Popup box 6.0 | earliest → 6.0.7 | No fix stated |
Other CVEs of Popup box
The 5 CVEs of Popup box →
CVE-2026-57631
Administrator SQL Injection in Popup box <= 6.0.1 versions
7.6
High
CVE-2026-54192
Unauthenticated Cross Site Scripting (XSS) in Popup box <= 6.2.9 versions
7.1
High
CVE-2025-57931
Cross-Site Request Forgery (CSRF) vulnerability in Ays Pro Popup box ays-popup-box allows Cross Site Request…
5.3
Medium
CVE-2021-24458
The get_ays_popupboxes() and get_popup_categories() functions of the Popup box WordPress plugin before 2.3.4 did not use…
Not rated