Plugin icon

PopupAlly

popupally

Vulnerabilities:

3

Last Updated:

May 28, 2026

Active Installs:

2000

Published
Title
Fixed in
CVSS
Published
2024-05-20
Title
PopupAlly < 2.1.2 - Authenticated (Administrator+) Stored Cross-Site Scripting
Fixed in
Fixed in 2.1.2
CVSS
4.4 (medium)
Published
2024-04-25
Title
PopupAlly < 2.1.2 - Admin+ Stored XSS
Fixed in
Fixed in 2.1.2
CVSS
3.5 (low)
Published
2024-01-30
Title
PopupAlly < 2.1.1 - Cross-Site Request Forgery via optin_submit_callback
Fixed in
Fixed in 2.1.1
CVSS
4.3 (medium)