Simple Popup Plugin
Simple Popup Plugin has 3 disclosed vulnerabilities in the WordSec catalog, all reported in 2024; 2 are fixed and 1 remains unpatched as of September 2026. Their average CVSS score is 5.7, and the most serious one scores 6.4 out of 10. 2024 was the busiest year with 3 disclosures.
The most common weakness is Cross-Site Scripting, behind 3 of the records (100%).
2 of the records (67%) have a vendor fix, while 1 remain unpatched. The oldest unresolved one dates back to 2024.
3 independent researchers contributed these findings, one record each. Simple Popup Plugin is installed on roughly 1,000 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 6.6.7.
CVE-2024-53741Simple Popup <= 4.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
Read the full analysisVulnerability Records

Simple Popup Plugin
Author
Garrett Grimm
Check out the latest WordPress deals for your site. Use this plugin to easily create links to simple popup windows. It supports multiple popup links on posts/pages/widgets and window positioning/centering options.
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C