Popup Box – Create Countdown, Coupon, Video, Contact Form Popups

Vulnerabilities 21Slug ays-popup-boxLatest version 6.2.7WordPress.org →

Minimum safe version

6.1.2

Update to 6.1.2 or later to address 21 fixable vulnerabilities

Latest available6.2.7 ✓
Medium 4.3
2026-01-31< 6.1.2

Popup Box <= 6.1.1 - Cross-Site Request Forgery to Popup Status Change

EUVDWordfenceCVE
N/A
2026-04-08< 5.5.0

Popup Box – Create Countdown, Coupon, Video, Contact Form Popups < 5.5.0 - Unauthenticated Stored Cross-Site Scripting

WordfenceCVE
Medium 5.4
2025-05-19< 4.7.8

WordPress Popup box Plugin < 4.7.8 is vulnerable to Cross Site Scripting (XSS)

PatchstackEUVDWordfenceCVE
Medium 4.8
2023-12-04< 3.8.6

CVE-2023-5874

CVEWPScan
N/A
2023-11-13< 3.8.7

Popup Box <= 3.8.6 - Authenticated (Administrator+) Stored Cross-Site Scripting

Wordfence
N/A
2023-08-31< 3.7.2

WordPress Popup box Plugin < 3.7.2 is vulnerable to Cross Site Scripting (XSS)

Patchstack
N/A
2023-08-18< 3.7.1

Popup Box <= 3.7.0 - Authenticated(Administrator+) Stored Cross-Site Scripting

Wordfence
N/A
2023-08-29< 3.7.2

Popup Box <= 3.7.1 - Authenticated(Administrator+) Stored Cross-Site Scripting

Wordfence
N/A
2021-06-29< 2.3.4

Popup box <= 2.3.3 - Cross-Site Scripting

Wordfence
N/A
< 2.3.4

Multiple Plugins from AYS Pro - Reflected Cross-Site Scripting (XSS)

WPScan