Catch Popup

Catch Popup has one disclosed vulnerability in the WordSec catalog, all reported in 2024; it remains unpatched as of September 2026. Their average CVSS score is 6.4, and the most serious one scores 6.4 out of 10.

The most common weakness is Cross-Site Scripting, behind 1 of the records (100%).

The one issue recorded for Catch Popup has no published fix yet, which makes virtual patching the only reliable mitigation. The oldest unresolved one dates back to 2024.

All of these findings were reported by zakaria. Catch Popup is installed on roughly 30 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 7.0.4.

Strategic Overview

Avg CVSSMedium

6.4/ 10

Patch Coverage0%

Open

Fixed

Get automatic notifications for all Catch Popup vulnerabilities before they are exploited.

Most severe open issueCVSS 6.4CVE-2024-11427

Catch Popup <= 1.4.4 - Authenticated (Contributor+) Stored Cross-Site Scripting

Read the full analysis

Vulnerability Records

1 records


2024-12-11 15:12	Catch Popup <= 1.4.4 - Authenticated (Contributor+) Stored Cross-Site Scripting Catch Popup <= 1.4.4	`CVE-2024-11427`	6.4 Medium	zakaria	No

Showing 1–1 of 1 reports

Latestv2.0

Catch Popup

Author

Catch Plugins

5.0(1)

100/100

Last Updated

2026-05-21 (4mo ago)

Active Installs

30+

Downloads

9,922

Requires WP

5.9+

Requires PHP

7.4+

Tested up to

WP 7.0.4

Created

2019-09-21 (7y ago)

Catch Popup is a free versatile popup WordPress plugin that is power-packed with incredible features and customization option. It is completely responsive, flexible, and comes with a wide range of features so that you can customize every aspect of your popup. Even the smallest elements like Titles and Close button are loaded with customization options. Despite the plugin bursting with features, it is extremely easy to use. Features like Popup Themes, Triggers, Appearance, Close button, Targeting, and more are integrated into Catch Popup. All of these features are jam-packed with options inside. You have the hold of each and every aspect of the popup. In addition to its versatility, the WordPress Popup Plugin comes with five in-built popup themes. You can even add popups in your posts, pages, custom post types or anywhere you like with the shortcode option. Since popups can be an excellent marketing tool, Catch popup will help you boost your business and conversion through user-friendly popups.

View on WordPress.org