woo-popup

woo-popup has one disclosed vulnerability in the WordSec catalog, all reported in 2015; it is fixed as of September 2026. Their average CVSS score is 6.1, and the most serious one scores 6.1 out of 10.

The most common weakness is Cross-Site Scripting, behind 1 of the records (100%).

The one issue recorded for woo-popup has a vendor fix available, so running the current release closes it.

woo-popup is installed on roughly 20 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 4.2.39.

Strategic Overview

Avg CVSSMedium

6.1/ 10

Patch Coverage100%

Open

Fixed

Get automatic notifications for all woo-popup vulnerabilities before they are exploited.

Highest severity on recordCVSS 6.1CVE-2015-10095

woo-popup <= 1.2.2 - Reflecte Cross-Site Scripting

Read the full analysis

Vulnerability Records

1 records


2015-05-21 00:00	woo-popup <= 1.2.2 - Reflecte Cross-Site Scripting woo-popup <= 1.2.2	`CVE-2015-10095`	6.1 Medium	Anonymous	Yes

Showing 1–1 of 1 reports

Latestv1.3.4

woo-popup

Author

Guillaume

3.5(6)

70/100

Last Updated

2015-10-30 (11y ago)

Active Installs

20+

Downloads

13,103

Requires WP

3.5.1+

Requires PHP

Tested up to

WP 4.2.39

Created

2014-03-31 (13y ago)

A plugin to show a pop up window with any text, links, images, and even shortcodes when on the chosen page or all pages. Useful to present your customers with possible shipping delays if using woocommerce or anything else you can think about. You can use it permanently or between 2 defined dates. Was made for woocommerce, late shipping or important info at the begining, but can be used on any wordpress installation. Updates 1.3 Updated PrettyPhoto and 2 more options, show/hide to returning visitors as well as prettyPhoto theming and cdn loading of the prettyPhoto.js file 1.2 Added option to display the popup permanently(no dates would then need to be selected) and possibility to choose the timezone you are in. Also possibility to display the popup on all pages. 1.1 Added wpaoutop for formatting and possibility to add a class to the content.

View on WordPress.org