Popup Builder – Create highly converting, mobile friendly marketing popups., CVE-2019-25744

CVE, Research URL: CVE-2019-25744
Home page URL: Security reports for Popup Builder – Create highly converting, mobile friendly marketing popups.
Application: Popup Builder – Create highly converting, mobile friendly marketing popups.
Published on: Jun 04, 2026
Research Description: WordPress Popup Builder 3.49 contains a persistent cross-site scripting vulnerability that allows authenticated attackers to inject malicious scripts by breaking out of option tags in the post_title parameter. Attackers can submit crafted POST requests to the post.php endpoint with script payloads in the post_title field that execute when pages or posts display popup selections.
Affected versions: max 3.49.
Status: vulnerable

Popup Builder &#8211; Create highly converting, mobile friendly marketing popups., CVE-2019-25744