Skip to content
Sign in
5.4 Medium

CVE-2022-4362 The Popup Maker WordPress plugin before 1.16.9 does not validate and escape one of its shortcode attributes, which could…

Description

The Popup Maker WordPress plugin before 1.16.9 does not validate and escape one of its shortcode attributes, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attacks

Affected products and versions

Product Affected versions Fixed in
Popup Maker 1.16 earliest → < 1.16.9 1.16.9

Other CVEs of Popup Maker

The 5 CVEs of Popup Maker →
CVE-2026-85004 The Popup Maker WordPress plugin through 1.4.5 does not perform a capability check on one of its account-connection… 4.3 Medium CVE-2024-5561 The Popup Maker WordPress plugin before 1.19.1 does not sanitise and escape some of its settings, which could allow… 4.8 Medium CVE-2022-4381 The Popup Maker WordPress plugin before 1.16.9 does not validate and escape one of its shortcode attributes, which could… 5.4 Medium CVE-2022-3690 The Popup Maker WordPress plugin before 1.16.11 does not sanitise and escape some of its Popup options, which could… 5.5 Medium
Track this CVE