Popup Builder – Create highly converting, mobile friendly marketing popups.

Vulnerabilities 28Slug popup-builderLatest version 4.4.3WordPress.org →

Minimum safe version

4.4.3

Update to 4.4.3 or later to address 28 fixable vulnerabilities

Latest available4.4.3 ✓
Medium 6.4
2025-12-13< 4.4.2

Popup Builder – Create highly converting, mobile friendly marketing popups. <= 4.4.1 - Authenticated (Contributor+) Stored Cross-Site Scripting

EUVDWordfenceCVE
Medium 6.4
2024-06-03< 4.3.0

WordPress Popup Builder Plugin <= 4.2.7 is vulnerable to Cross Site Scripting (XSS)

PatchstackCVEWordfence
Medium 4.8
2023-09-26< 4.2.2

WordPress Popup Builder Plugin <= 4.1.15 is vulnerable to Cross Site Scripting (XSS)

PatchstackCVEWordfenceWPScan
N/A
2021-01-28< 3.72

Popup Builder <= 3.72 Missing Authorization on AJAX actions

Wordfence
N/A
2019-08-06< 3.45

WordPress Popup Builder plugin <= 3.44 - SQL Injection (SQLi) vulnerability

Patchstack
N/A
2020-12-14< 3.69.7

WordPress Popup Builder plugin <= 3.69.6 - Multiple Stored Cross-Site Scripting (XSS) vulnerabilities

Patchstack
N/A
2021-01-28< 3.72

WordPress Popup Builder plugin <= 3.71 - Authenticated Newsletter Send With Custom Content And Sender vulnerability

Patchstack
N/A
2021-01-28< 3.72

WordPress Popup Builder plugin <= 3.71 - Authenticated Deleting/Importing Subscribers vulnerability

Patchstack
N/A
2021-01-28< 3.72

WordPress Popup Builder plugin <= 3.71 - Authenticated Local File Inclusion (LFI) vulnerability

Patchstack