cleantalk
Vulnerabilities and Security Researches

Popup Maker – Responsive popup, Exit Intent Pop up, Email Optins, Autoresponder & More, CVE-2026-85004

CVE, Research URL

CVE-2026-85004

Home page URL

Security reports for Popup Maker – Responsive popup, Exit Intent Pop up, Email Optins, Autoresponder & More

Application

Popup Maker – Responsive popup, Exit Intent Pop up, Email Optins, Autoresponder & More

Published on
Oct 02, 2026
Research Description
The Popup Maker WordPress plugin through 1.4.5 does not perform a capability check on one of its account-connection actions, only verifying a nonce, allowing authenticated users with minimal privileges such as Subscribers to overwrite a site-wide Popup Maker WordPress plugin through 1.4.5 option (the linked service account and API configuration) that should only be modifiable by administrators.
Affected versions
max 1.4.5.
Status
vulnerable
Previous vulnerability researches
Popup Maker – Responsive popup, Exit Intent Pop up, Email Optins, Autoresponder & More (CVE-2024-34770) , Jun 07, 2024
Popup Maker – Responsive popup, Exit Intent Pop up, Email Optins, Autoresponder & More (CVE-2026-85004) , Oct 04, 2026
Popup Maker – Responsive popup, Exit Intent Pop up, Email Optins, Autoresponder & More (CVE-2026-85005) , Oct 04, 2026
New vulnerability
Motors – Car Dealer, Classifieds & Listing (CVE-2026-91022) , Oct 04, 2026
WP User Frontend – Registration, User Profile, Membership, Content Restriction, User Directory, and Frontend Post Submiss (CVE-2026-79618) , Oct 04, 2026
Wp Edit Password Protected – Create Member/User Only Page & Design Password Protected Form (CVE-2026-90952) , Oct 04, 2026
Request a Quote (CVE-2026-90988) , Oct 04, 2026
Popup Maker – Responsive popup, Exit Intent Pop up, Email Optins, Autoresponder & More (CVE-2026-85005) , Oct 04, 2026