WP Security CheckVulnerability data as of October 22, 2026

Known vulnerabilities in Popup Box – Create Countdown, Coupon, Video, Contact Form Popups

Build flexible popups and modal windows with multiple popup types, triggers, and display controls.

21Reported vulnerabilities
8.8Highest CVSS score
6.3.7Latest version
50,000+Active installs

What to do now

Update Popup Box – Create Countdown, Coupon, Video, Contact Form Popups to 6.4.3 or later. 21 of these have a fixed version available. Updating resolves them.

Plugin last updated: August 6, 2026 / Tested up to WordPress: 7.0.4 / View on wordpress.org

Reported vulnerabilities

Ordered by how urgently they need attention — whether a vulnerability is actually being exploited, and how likely exploitation is, rather than CVSS severity alone.

CVESeverityExploit probability
next 30 days		 Affected versionsFixed inPublished
CVE-2021-24458 High 8.8 1.4% Before 2.3.4 2.3.4 August 2, 2021
CVE-2024-9599 Medium 5.4 0.3% Before 4.7.8 4.7.8 May 15, 2025
CVE-2025-15611 Medium 5.4 0.1% Before 5.5.0 5.5.0 April 7, 2026
CVE-2023-6591 Medium 4.8 0.5% 20.8.7 up to (but not including) 20.9.0 20.9.0 February 12, 2024
CVE-2023-5874 Medium 4.8 0.4% Before 3.8.6 3.8.6 December 4, 2023
CVE-2023-5809 Medium 4.8 0.4% Before 3.8.6 3.8.6 December 4, 2023
CVE-2023-5343 Medium 4.8 0.5% Before 3.7.9 3.7.9 November 20, 2023
CVE-2023-4390 Medium 4.8 0.4% Before 3.7.2 3.7.2 October 31, 2023
CVE-2026-54192 Medium 6.1 0.3% 6.2.9 and earlier 6.3.0 June 16, 2026
CVE-2024-34367 Medium 6.1 0.2% 4.1.2 and earlier 4.1.3 May 3, 2024
WF-8c68cf18-0210-452f-933e-6f1e50323b15 Medium 6.1 — 2.3.3 and earlier 2.3.4 June 29, 2021
CVE-2024-3897 Medium 5.3 0.6% 0 to 4.3.6 (inclusive)
0 to 4.3.6 (inclusive)		 4.3.7 May 2, 2024
CVE-2023-27414 Medium 5.4 0.4% 3.4.4 and earlier 3.4.5 March 8, 2023
CVE-2024-10861 Medium 5.3 0.4% 0 to 4.9.7 (inclusive)
0 to 4.9.7 (inclusive)		 4.9.8 November 16, 2024
CVE-2026-100159 Medium 4.8 0.3% 6.4.1 to 6.4.2 (inclusive) 6.4.3 October 16, 2026
CVE-2026-57631 Medium 4.9 0.4% 6.0.1 and earlier 6.0.2 June 26, 2026
CVE-2026-1165 Medium 4.3 0.2% 0 to 6.1.1 (inclusive) 6.1.2 January 31, 2026
CVE-2025-69021 Medium 4.3 0.1% 6.0.7 and earlier 6.0.8 December 28, 2025
CVE-2025-57931 Medium 4.3 0.1% 5.5.4 and earlier 5.5.5 October 29, 2025
CVE-2024-37096 Medium 4.3 0.3% 4.5.1 and earlier 4.5.2 June 20, 2024
WF-1289ead7-1af1-417d-aa47-7d07268f956c Medium 4.4 — Before 3.7.1 3.7.1 August 18, 2023

Sources: vulnerability records from NVD, exploitation from CISA KEV, exploit probability from EPSS. Affected versions come from CPE ranges or from the reporting CNA.