WP Vulnerability WatchVulnerability data as of September 7, 2026

Known vulnerabilities in Popup Box – Create Countdown, Coupon, Video, Contact Form Popups

Build flexible popups and modal windows with multiple popup types, triggers, and display controls.

13Reported vulnerabilities
6.1Highest CVSS score
6.3.7Latest version
50,000+Active installs

What to do now

Update Popup Box – Create Countdown, Coupon, Video, Contact Form Popups to 6.0.2 or later. 13 of these have a fixed version available. Updating resolves them.

Plugin last updated: August 6, 2026 / Tested up to WordPress: 7.0.4 / View on wordpress.org

Reported vulnerabilities

Ordered by how urgently they need attention — whether a vulnerability is actually being exploited, and how likely exploitation is, rather than CVSS severity alone.

CVESeverityExploit probability
next 30 days
Affected versionsFixed inPublished
CVE-2023-6591 Medium 4.8 0.5% 20.8.7 up to (but not including) 20.9.0 20.9.0 February 12, 2024
CVE-2026-54192 Medium 6.1 0.2% 6.2.9 and earlier 6.3.0 June 16, 2026
CVE-2024-34367 Medium 6.1 0.2% 4.1.2 and earlier 4.1.3 May 3, 2024
WF-8c68cf18-0210-452f-933e-6f1e50323b15 Medium 6.1 2.3.3 and earlier 2.3.4 June 29, 2021
CVE-2024-3897 Medium 5.3 0.6% 0 to 4.3.6 (inclusive)
0 to 4.3.6 (inclusive)
4.3.7 May 2, 2024
CVE-2023-27414 Medium 5.4 0.4% 3.4.4 and earlier 3.4.5 March 8, 2023
CVE-2024-10861 Medium 5.3 0.4% 0 to 4.9.7 (inclusive)
0 to 4.9.7 (inclusive)
4.9.8 November 16, 2024
CVE-2026-57631 Medium 4.9 0.4% 6.0.1 and earlier 6.0.2 June 26, 2026
CVE-2026-1165 Medium 4.3 0.2% 0 to 6.1.1 (inclusive) 6.1.2 January 31, 2026
CVE-2025-69021 Medium 4.3 0.1% 6.0.7 and earlier 6.0.8 December 28, 2025
CVE-2025-57931 Medium 4.3 0.1% 5.5.4 and earlier 5.5.5 October 29, 2025
CVE-2024-37096 Medium 4.3 0.3% 4.5.1 and earlier 4.5.2 June 20, 2024
WF-1289ead7-1af1-417d-aa47-7d07268f956c Medium 4.4 Before 3.7.1 3.7.1 August 18, 2023

Sources: vulnerability records from NVD, exploitation from CISA KEV, exploit probability from EPSS. Affected versions come from CPE ranges or from the reporting CNA.