Popup with fancybox
Popup with fancybox has one disclosed vulnerability in the WordSec catalog, all reported in 2023; it is fixed as of September 2026. Their average CVSS score is 8.8, and the most serious one scores 8.8 out of 10. Severity breakdown: 0 critical and 1 high.
The most common weakness is SQL Injection, behind 1 of the records (100%).
The one issue recorded for Popup with fancybox has a vendor fix available, so running the current release closes it.
All of these findings were reported by István Márton. Popup with fancybox is installed on roughly 900 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 6.4.10.
CVE-2023-5465Popup with fancybox <= 3.5 - Authenticated (Subscriber+) SQL Injection via Shortcode
Read the full analysisVulnerability Records

Popup with fancybox
Author
gopiplus@hotmail.com
This plugin allows you to create lightweight JQuery fancy box popup window in your blog with custom content. In the admin interface we can easily configure popup size and timeout (i.e. show popup window based on timeout after page load). In this popup we can display any content such as Video, Image, Advertisement and much more. Check official website for live demo http://www.gopiplus.com/work/2013/08/08/popup-with-fancybox-wordpress-plugin/ Live Demo More information User Comments Donate This plugin allows you to create lightweight JQuery fancy box popup window in your blog with custom content. In the admin interface we can easily configure popup size and timeout (i.e. show popup window based on timeout after page load). In this popup we can display any content such as Video, Image, Advertisement and much more. In the admin we have standard wordpress HTML editor to create the popup message. So that we can customise the messages easily. also we have option to set expiration time for popup window. and we have option to display popup once per session, so that the popup never appear again if user navigate to another page. Advantage of this plugin Lightweight JQuery. Fancybox css in popup windows. Show popup window based on timeout after page load. HTML editor to create the popup message. Option to set expiration time for message. Option to set popup display once per session. Supports localization. Plugin configuration option Display popup in specific page/post. This plugin have short code option to display the popup in specific page. Just copy and paste the plugin short code into specific posts or pages to display the popup. We can use group name or message id to display the popup. Display popup in entire website. Go to widget page and drag and drop the widget Popup with fancybox into your sidebar, so that popup will display in entire website. Copy and paste the given PHP code into your footer.php file, so that popup will display in the entire website. Display popup only in the home page. Download footer.php file from your theme folder. Paste the given PHP code, and upload back to server. Translators Tamil (ta) – Gopi Ramasamy Polish (pl) – Abdul Sattar
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C