Medium 4.3
2025-07-16< 1.8.5
CVE-2025-54018
Minimum safe version
1.8.5
Update to 1.8.5 or later to address 9 fixable vulnerabilities
CVE-2025-54018
CVE-2025-24758
CVE-2024-11202
CVE-2024-5799
CVE-2024-5004
CVE-2023-30750
CM Pop-Up banners <= 1.4.10 - Authenticated Stored Cross-Site Scripting
CM Pop-Up banners < 1.4.11 - Authenticated Stored XSS
WordPress CM Pop-Up banners plugin <= 1.4.10 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability