Supsystic
Supsystic Popup: vulnerabilidades y CVE
Supsystic Popup tiene 12 vulnerabilidades publicadas, 2 de ellas en los últimos 12 meses. 5 son críticas y 0 figuran en el catálogo de explotación activa de CISA.
CVE12
Últimos 12 meses2
Críticas5
Explotadas activamente0
Todas las vulnerabilidades en el catálogo →⭐ Seguir esta tecnología
Últimas vulnerabilidades
| CVE | Severidad | EPSS | Explotación activa | Publicada | Descripción |
|---|---|---|---|---|---|
| CVE-2026-102398 | Alta (7.1) | 0.18% | — | 30 sept 2026 | Unauthenticated Cross Site Scripting (XSS) in Popup by Supsystic <= 1.13.1 versions. |
| CVE-2026-73380 | Crítica (9.8) | 0.56% | — | 18 ago 2026 | Unauthenticated PHP Object Injection in Popup by Supsystic <= 1.13.0 versions. |
| CVE-2023-39997 | Crítica (9.8) | 0.67% | — | 13 dic 2024 | Missing Authorization vulnerability in supsystic.com Popup by Supsystic allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Popup by Supsystic: from n/a through 1.10.19. |
| CVE-2023-51353 | Crítica (9.8) | 0.57% | — | 9 dic 2024 | Missing Authorization vulnerability in supsystic Popup by Supsystic popup-by-supsystic allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Popup by Supsystic: from n/a through <=… |
| CVE-2024-52434 | Crítica (9.1) | 1.1% | — | 18 nov 2024 | Deserialization of Untrusted Data vulnerability in supsystic Popup by Supsystic popup-by-supsystic allows Command Injection.This issue affects Popup by Supsystic: from n/a through <= 1.10.29. |
| CVE-2023-46197 | Media (6.5) | 1.3% | — | 17 may 2024 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in supsystic.Com Popup by Supsystic allows Relative Path Traversal.This issue affects Popup by Supsystic: from n/a through… |
| CVE-2024-31421 | Media (4.3) | 0.36% | — | 15 abr 2024 | Missing Authorization vulnerability in supsystic Popup by Supsystic popup-by-supsystic.This issue affects Popup by Supsystic: from n/a through <= 1.10.27. |
| CVE-2023-3186 | Crítica (9.8) | 1.5% | — | 17 jul 2023 | The Popup by Supsystic WordPress plugin before 1.10.19 has a prototype pollution vulnerability that could allow an attacker to inject arbitrary properties into Object.prototype. |
| CVE-2017-20065 | Media (4.3) | 0.71% | — | 20 jun 2022 | A vulnerability was found in Supsystic Popup Plugin 1.7.6 and classified as problematic. This issue affects some unknown processing. The manipulation leads to cross-site request forgery. The attack may be initiated… |
| CVE-2022-0424 | Media (5.3) | 2.9% | — | 9 may 2022 | The Popup by Supsystic WordPress plugin before 1.10.9 does not have any authentication and authorisation in an AJAX action, allowing unauthenticated attackers to call it and get the email addresses of subscribed users |
| CVE-2021-24275 | Media (6.1) | 18% | — | 5 may 2021 | The Popup by Supsystic WordPress plugin before 1.10.5 did not sanitise the tab parameter of its options page before outputting it in an attribute, leading to a reflected Cross-Site Scripting issue |
| CVE-2016-10915 | Alta (8.8) | 0.68% | — | 20 ago 2019 | The popup-by-supsystic plugin before 1.7.9 for WordPress has CSRF. |
🎯 Cómo se explota (técnicas ATT&CK)
Número de CVE de esta tecnología asignadas a cada técnica de explotación o de impacto principal.