This page lists publicly disclosed CVE vulnerabilities affecting cminds cm_popup (linked via NVD CPE). Each row includes severity scores, summaries, and publication dates to help identify and analyze security issues.
| CVE | Summary | Source | Max CVSS | EPSS % | Published | Updated |
|---|---|---|---|---|---|---|
| CVE-2024-5799 | The CM Pop-Up Banners for WordPress plugin before 1.7.3 does not sanitise and escape some of its popup fields, which could allow high privilege users such as Contributors to perform Cross-Site Scripting attacks. | [email protected] | 4.8 | 0.30% | 2024-09-12 | 2026-06-17 |
| CVE-2024-5004 | The CM Popup Plugin for WordPress WordPress plugin before 1.6.6 does not sanitise and escape some of the campaign settings, which could allow high privilege users such as contributor to perform Stored Cross-Site Scripting attacks | [email protected] | 4.8 | 0.33% | 2024-07-22 | 2026-06-17 |
| CVE-2023-30750 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in CreativeMindsSolutions CM Popup Plugin for WordPress.This issue affects CM Popup Plugin for WordPress: from n/a through 1.5.10. | [email protected] | 8.5 | 0.62% | 2023-12-20 | 2026-06-17 |