WP Security CheckVulnerability data as of October 25, 2026

Vulnerability alerts / October 23, 2026

Vulnerability in Popup Builder – Create highly converting, mobile friendly marketing popups. — CVE-2026-112230

MediumSeverity
CVSS 5.3
0.2%Estimated exploit probability
EPSS
200,000+ sitesInstalls
4.4.6Fixed in

What to do now

Update Popup Builder – Create highly converting, mobile friendly marketing popups. to 4.4.6 or later.

Affected versions

  • Everything before 4.4.6

Affected: Popup Builder – Create highly converting, mobile friendly marketing popups. (plugin, popup-builder)

Check: The plugin on wordpress.org / Our record for Popup Builder – Create highly converting, mobile friendly marketing popups.

What the vulnerability is

The Popup Builder – Create highly converting, mobile friendly marketing popups. plugin for WordPress is vulnerable to unauthorized access in all versions up to 4.4.6. This is due to a missing capability check on a function. This makes it possible for unauthenticated attackers to perform an unauthorized action.

This description is reproduced verbatim from the public vulnerability record.

Sources

Part of this record comes from Wordfence Intelligence. Original: https://www.wordfence.com/threat-intel/vulnerabilities/id/81bafe3c-ce52-49c9-8818-e177205a463c
Copyright 2012-2026 Defiant Inc. / Full license text

This page is compiled automatically from public databases. Accuracy is not guaranteed; confirm against the vendor advisory before acting.

See other alerts