JetPopup

JetPopup has 8 disclosed vulnerabilities in the WordSec catalog, reported between 2023 and 2026; all 8 are fixed as of September 2026. Their average CVSS score is 5.3, and the most serious one scores 6.4 out of 10. 2025 was the busiest year with 5 disclosures.

The most common weakness is Missing Authorization, behind 3 of the records (38%). Other recurring categories include Cross-Site Scripting, Exposure Of Sensitive Information To An Unauthorized Actor.

Every one of the 8 issues recorded for JetPopup has a vendor fix available, so running the current release closes all known holes.

3 independent researchers contributed these findings, most of them (4) reported by stealthcopter.

Strategic Overview

Avg CVSSMedium

5.3/ 10

Patch Coverage100%

Open

Fixed

Get automatic notifications for all JetPopup vulnerabilities before they are exploited.

Highest severity on recordCVSS 6.4CVE-2025-53995

JetPopup <= 2.0.15.1 - Authenticated (Contributor+) Stored Cross-Site Scripting

Read the full analysis

Vulnerability Records

8 records


2026-09-04 00:00	JetPopup <= 2.0.20.2 - Missing Authorization JetPopup <= 2.0.20.2	`CVE-2026-27347`	5.3 Medium	Bonds	Yes
2025-12-30 00:00	JetPopup <= 2.0.20.1 - Authenticated (Contributor+) Insecure Direct Object Reference JetPopup <= 2.0.20.1	`CVE-2025-68502`	4.3 Medium	Bonds	Yes
2025-07-16 00:00	JetPopup <= 2.0.15.1 - Authenticated (Contributor+) Stored Cross-Site Scripting JetPopup <= 2.0.15.1	`CVE-2025-53995`	6.4 Medium	stealthcopter	Yes
2025-07-16 00:00	JetPopup <= 2.0.15 - Authenticated (Subscriber+) Information Disclosure JetPopup <= 2.0.15	`CVE-2025-53993`	4.3 Medium	stealthcopter	Yes
2025-07-16 00:00	JetPopup <= 2.0.15 - Authenticated (Contributor+) Stored Cross-Site Scripting JetPopup <= 2.0.15	`CVE-2025-53994`	6.4 Medium	stealthcopter	Yes
2025-04-15 00:00	JetPopup <= 2.0.11 - Missing Authorization JetPopup <= 2.0.11	`CVE-2025-26944`	5.3 Medium	stealthcopter	Yes
2023-11-28 00:00	Multiple Plugins by Crocoblock <= (Various Versions) - Cross-Site Request Forgery JetPopup <= 2.0.2	`CVE-2023-48762`	4.3 Medium	Rafie Muhammad	Yes
2023-11-28 00:00	Multiple Plugins by Crocoblock <= (Various Versions) - Missing Authorization JetPopup <= 2.0.2	`CVE-2023-48761`	6.3 Medium	Rafie Muhammad	Yes

Showing 1–8 of 8 reports