WP Vulnerability WatchVulnerability data as of September 7, 2026

Known vulnerabilities in Popup Maker – Boost Sales, Conversions, Optins, Subscribers with the Ultimate WP Popup Builder

Want to boost sales & marketing efforts? Use your favorite forms & builder. Unlimited popups & impressions, keep your data, no monthly subscription.

19Reported vulnerabilities
9.1Highest CVSS score
1.24.0Latest version
700,000+Active installs

What to do now

Update Popup Maker – Boost Sales, Conversions, Optins, Subscribers with the Ultimate WP Popup Builder to 1.24.0 or later. 19 of these have a fixed version available. Updating resolves them.

Plugin last updated: August 15, 2026 / Tested up to WordPress: 7.0.4 / View on wordpress.org

Reported vulnerabilities

Ordered by how urgently they need attention — whether a vulnerability is actually being exploited, and how likely exploitation is, rather than CVSS severity alone.

CVESeverityExploit probability
next 30 days		 Affected versionsFixed inPublished
CVE-2022-1104 Medium 4.8 56.4% Before 1.16.5 1.16.5 May 9, 2022
CVE-2019-17574 Critical 9.1 9.4% Before 1.8.13 1.8.13 October 14, 2019
CVE-2022-4381 Medium 5.4 0.5% Before 1.16.9 1.16.9 January 2, 2023
CVE-2022-4362 Medium 5.4 0.6% Before 1.16.9 1.16.9 January 2, 2023
CVE-2024-5561 Medium 4.8 0.5% Before 1.19.1 1.19.1 September 9, 2024
CVE-2022-3690 Medium 4.8 0.6% Before 1.16.11 1.16.11 November 21, 2022
CVE-2026-8848 High 7.2 1.2% 0 to 1.22.0 (inclusive) 1.23.0 July 9, 2026
CVE-2026-28177 High 7.2 0.2% 1.23.0 and earlier 1.24.0 August 5, 2026
CVE-2017-2284 Medium 6.1 1.6% Before 1.6.5 1.6.5 July 24, 2017
CVE-2025-4205 Medium 6.4 0.3% 0 to 1.20.4 (inclusive) 1.20.5 June 3, 2025
CVE-2025-24746 Medium 6.4 0.3% 1.20.2 and earlier 1.20.3 January 24, 2025
CVE-2025-9490 Medium 6.4 0.2% 0 to 1.20.6 (inclusive) 1.21.0 September 26, 2025
CVE-2024-10583 Medium 5.4 0.3% Before 1.20.3 1.20.3 December 12, 2024
CVE-2024-7054 Medium 5.4 0.3% Before 1.19.1 1.19.1 August 20, 2024
CVE-2024-2336 Medium 5.4 0.3% Before 1.19.0 1.19.0 April 9, 2024
CVE-2022-47597 Medium 5.3 0.6% 1.17.1 and earlier 1.18.0 March 14, 2023
CVE-2022-45819 Medium 5.4 0.4% 1.17.1 and earlier 1.18.0 March 9, 2023
CVE-2024-47358 Medium 5.3 0.4% 1.19.2 and earlier 1.20.0 September 30, 2024
WF-533f71d5-823d-45eb-8ecf-76afafd2a5d3 Medium 4.3 — 1.18.0 and earlier 1.18.1 March 8, 2023

Sources: vulnerability records from NVD, exploitation from CISA KEV, exploit probability from EPSS. Affected versions come from CPE ranges or from the reporting CNA.