Simple Popup Plugin

Simple Popup Plugin has 3 disclosed vulnerabilities in the WordSec catalog, all reported in 2024; 2 are fixed and 1 remains unpatched as of September 2026. Their average CVSS score is 5.7, and the most serious one scores 6.4 out of 10. 2024 was the busiest year with 3 disclosures.

The most common weakness is Cross-Site Scripting, behind 3 of the records (100%).

2 of the records (67%) have a vendor fix, while 1 remain unpatched. The oldest unresolved one dates back to 2024.

3 independent researchers contributed these findings, one record each. Simple Popup Plugin is installed on roughly 1,000 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 6.6.7.

Strategic Overview

Avg CVSSMedium
5.7/ 10
Patch Coverage67%
Open

1

Fixed

2

Get automatic notifications for all Simple Popup Plugin vulnerabilities before they are exploited.

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C