WP Vulnerability WatchVulnerability data as of September 7, 2026

Known vulnerabilities in Popup Builder – Create highly converting, mobile friendly marketing popups.

Increase Sales, Lead Generation, Conversion rates and receive good Call to Action rates with smart WordPress popup plugin.

25Reported vulnerabilities
9.8Highest CVSS score
4.4.5Latest version
200,000+Active installs

What to do now

Update Popup Builder – Create highly converting, mobile friendly marketing popups. to 4.4.3 or later. 24 of these have a fixed version available. Updating resolves them.

Plugin last updated: July 18, 2026 / Tested up to WordPress: 7.0.4 / View on wordpress.org

Reported vulnerabilities

Ordered by how urgently they need attention — whether a vulnerability is actually being exploited, and how likely exploitation is, rather than CVSS severity alone.

CVESeverityExploit probability
next 30 days		 Affected versionsFixed inPublished
CVE-2022-0479 Critical 9.8 43.8% Before 4.1.1 4.1.1 March 28, 2022
CVE-2020-9006 Critical 9.8 8.6% 2.2.8 to 2.6.7.6 (inclusive) 3.0 February 17, 2020
CVE-2021-25082 High 8.8 5.2% Before 4.0.7 4.0.7 February 21, 2022
CVE-2022-0228 High 7.2 5.9% Before 4.0.7 4.0.7 February 21, 2022
CVE-2023-6294 High 7.2 0.8% Before 4.2.6 4.2.6 February 12, 2024
CVE-2023-6000 Medium 6.1 2.0% Before 4.2.3 4.2.3 January 1, 2024
CVE-2020-10195 Medium 6.3 1.1% Before 3.64.1 3.64.1 March 13, 2020
CVE-2019-14695 Critical 9.8 2.7% Before 3.45 3.45 August 6, 2019
CVE-2020-10196 Medium 6.1 1.4% Before 3.64.1 3.64.1 March 13, 2020
CVE-2024-3236 Medium 5.4 0.3% Before 1.1.33 1.1.33 June 17, 2024
CVE-2024-9428 Medium 4.8 0.3% Before 4.3.5 4.3.5 December 12, 2024
CVE-2023-3226 Medium 4.8 0.4% 4.1.15 and earlier 4.2.2 September 25, 2023
CVE-2022-1894 Medium 4.8 0.6% Before 4.1.11 4.1.11 July 11, 2022
CVE-2023-6696 High 8.1 0.5% Before 4.3.2 4.3.2 June 15, 2024
CVE-2024-2541 High 7.5 0.6% 4.3.3 and earlier 4.3.7 August 29, 2024
CVE-2025-9856 Medium 6.4 0.3% 0 to 4.4.1 (inclusive) 4.4.2 December 13, 2025
CVE-2024-2544 Medium 6.4 0.3% Before 4.3.2 4.3.2 June 15, 2024
CVE-2024-2506 Medium 6.4 0.3% 4.2.7 and earlier 4.3.0 May 31, 2024
CVE-2024-30184 Medium 6.4 0.4% 4.2.6 and earlier 4.2.7 March 25, 2024
CVE-2021-24152 Medium 6.1 0.7% 3.73 and earlier 3.74 February 2, 2021
WF-ec0fff2a-602d-441b-89d1-64d609a4abc0 Medium 6.3 — 3.71 and earlier 3.72 January 28, 2021
CVE-2025-13079 Medium 5.3 0.4% 0 to 4.4.2 (inclusive) 4.4.3 February 19, 2026
CVE-2019-25744 Medium 5.1 0.2% — — June 4, 2026
CVE-2022-29495 Medium 4.3 0.5% Before 4.1.12 4.1.12 July 22, 2022
CVE-2022-32289 Medium 4.3 0.3% Before 4.1.1 4.1.1 July 21, 2022

Sources: vulnerability records from NVD, exploitation from CISA KEV, exploit probability from EPSS. Affected versions come from CPE ranges or from the reporting CNA.