Plugin icon

Smart Popup by Supsystic

popup-by-supsystic

Vulnerabilities:

13

Last Updated:

October 9, 2026

Active Installs:

10000

Published
Title
Fixed in
CVSS
Published
2026-10-09
Title
Smart Popup by Supsystic < 1.13.3 - Authenticated (Administrator+) SQL Injection via 'sidx' Parameter
Fixed in
Fixed in 1.13.3
CVSS
4.9 (medium)
Published
2026-09-30
Title
Smart Popup by Supsystic < 1.13.2 - Unauthenticated Stored Cross-Site Scripting
Fixed in
Fixed in 1.13.2
CVSS
7.2 (high)
Published
2026-08-18
Title
Smart Popup by Supsystic < 1.13.1 - Unauthenticated PHP Object Injection
Fixed in
Fixed in 1.13.1
CVSS
8.1 (high)
Published
2026-08-18
Title
Smart Popup by Supsystic < 1.13.1 - Missing Authorization
Fixed in
Fixed in 1.13.1
CVSS
5.3 (medium)
Published
2026-08-11
Title
Smart Popup by Supsystic < 1.12.0 - Unauthenticated Stored Cross-Site Scripting
Fixed in
Fixed in 1.12.0
CVSS
7.2 (high)
Published
2026-08-04
Title
Smart Popup by Supsystic < 1.13.0 - Unauthenticated Privilege Escalation to Administrator
Fixed in
Fixed in 1.13.0
CVSS
9.8 (critical)
Published
2024-11-15
Title
Popup by Supsystic < 1.10.30 - Admin+ Remote Code Execution
Fixed in
Fixed in 1.10.30
CVSS
6.6 (medium)
Published
2024-04-10
Title
Popup by Supsystic < 1.10.28 - Missing Authorization
Fixed in
Fixed in 1.10.28
CVSS
4.3 (medium)
Published
2023-10-18
Title
Popup by Supsystic < 1.10.20 - Missing Authorization to Sensitive Information Exposure
Fixed in
Fixed in 1.10.20
CVSS
4.3 (medium)
Published
2023-06-23
Title
Supsystic Popup < 1.10.19 - Prototype Pollution
Fixed in
Fixed in 1.10.19
CVSS
6.1 (medium)
Published
2022-04-18
Title
Popup by Supsystic < 1.10.9 - Unauthenticated Subscriber Email Addresses Disclosure
Fixed in
Fixed in 1.10.9
CVSS
7.5 (high)
Published
2021-04-19
Title
Popup by Supsystic < 1.10.5 - Reflected Cross-Site scripting (XSS)
Fixed in
Fixed in 1.10.5
CVSS
7.1 (high)
Published
2017-03-01
Title
Popup by Supsystic <= 1.7.8 - Cross-Site Request Forgery (CSRF)
Fixed in
Fixed in 1.7.9
CVSS
8.8 (high)