CSRF
2 records25%First: 2016. Latest: 2023.
Plugin security history
Smart Popup by Supsystic Vulnerability History & Security Timeline
The Wordfence Intelligence dataset currently contains 8 vulnerability records associated with Smart Popup by Supsystic, published between 2016 and 2024.
Dataset last synchronized: 2026-08-03 00:31:25 UTC
At a glance
Security Snapshot
8Total records
1Critical
2High
5Medium
0Low
0Informational
8Patched records
0Currently marked unpatched
2016-09-07First disclosure
2024-11-15Latest disclosure
8 of 8CVE coverage
Use this history
Check and watch Smart Popup by Supsystic.
A history record does not establish whether the version installed on your website is affected. Enter the exact version in the checker, or add this software to a private Critical/High alert watchlist.
Year-by-Year Timeline
| Year | Records | Relative volume |
|---|---|---|
| 2016 | 1 | |
| 2021 | 1 | |
| 2022 | 1 | |
| 2023 | 3 | |
| 2024 | 2 |
Severity Breakdown
| Severity | Records | Share |
|---|---|---|
| Critical | 1 | 12.5% |
| High | 2 | 25% |
| Medium | 5 | 62.5% |
Vulnerability-Type Breakdown
Information Disclosure
2 records25%First: 2022. Latest: 2023.
Other
2 records25%First: 2023. Latest: 2024.
Cross-Site Scripting
1 record12.5%First: 2021. Latest: 2021.
Missing Authorization
1 record12.5%First: 2024. Latest: 2024.
Patch Status
- Patched
- 8
- Currently marked unpatched
- 0
- Unknown status
- 0
Patch status reflects the latest successfully synchronized source dataset and must be checked against the installed version.
Latest Known Patched Versions
1.10.301.10.281.10.201.10.191.10.91.10.51.7.9
Affected-Version History
Ranges are deduplicated by source range record and shown with the associated disclosure and known patched versions.
| Affected range | Vulnerability | Published | Patched version | Severity |
|---|---|---|---|---|
*-1.10.29 | Popup by Supsystic <= 1.10.29 - Authenticated (Admin+) Remote Code Execution | November 15, 2024 | 1.10.30 | Critical |
*-1.10.27 | Popup by Supsystic <= 1.10.27 - Missing Authorization | April 10, 2024 | 1.10.28 | Medium |
*-1.10.19 | Popup by Supsystic <= 1.10.19 - Missing Authorization to Sensitive Information Exposure | October 18, 2023 | 1.10.20 | Medium |
*-1.10.19 | Popup by Supsystic <= 1.10.19 - Cross-Site Request Forgery | August 11, 2023 | 1.10.20 | Medium |
[*, 1.10.19) | Popup by Supsystic <= 1.10.18 - Prototype Pollution | June 23, 2023 | 1.10.19 | High |
[*, 1.10.9) | Popup by Supsystic <= 1.10.8 - Sensitive Information Disclosure | April 18, 2022 | 1.10.9 | Medium |
*-1.10.4 | Popup by Supsystic <= 1.10.4 - Reflected Cross-Site Scripting | April 19, 2021 | 1.10.5 | Medium |
[*, 1.7.9) | Popup by Supsystic < 1.7.9 - Cross-Site Request Forgery | September 7, 2016 | 1.7.9 | High |
Selected source records
Latest Records
CriticalCVE-2024-52434
Popup by Supsystic <= 1.10.29 - Authenticated (Admin+) Remote Code Execution
Published: November 15, 2024
- Affected versions
- *-1.10.29
- Patched versions
- 1.10.30
MediumCVE-2024-31421
Popup by Supsystic <= 1.10.27 - Missing Authorization
Published: April 10, 2024
- Affected versions
- *-1.10.27
- Patched versions
- 1.10.28
MediumCVE-2023-46197
Popup by Supsystic <= 1.10.19 - Missing Authorization to Sensitive Information Exposure
Published: October 18, 2023
- Affected versions
- *-1.10.19
- Patched versions
- 1.10.20
MediumCVE-2023-39997
Popup by Supsystic <= 1.10.19 - Cross-Site Request Forgery
Published: August 11, 2023
- Affected versions
- *-1.10.19
- Patched versions
- 1.10.20
HighCVE-2023-3186
Popup by Supsystic <= 1.10.18 - Prototype Pollution
Published: June 23, 2023
- Affected versions
- [*, 1.10.19)
- Patched versions
- 1.10.19
MediumCVE-2022-0424
Popup by Supsystic <= 1.10.8 - Sensitive Information Disclosure
Published: April 18, 2022
- Affected versions
- [*, 1.10.9)
- Patched versions
- 1.10.9
MediumCVE-2021-24275
Popup by Supsystic <= 1.10.4 - Reflected Cross-Site Scripting
Published: April 19, 2021
- Affected versions
- *-1.10.4
- Patched versions
- 1.10.5
HighCVE-2016-10915
Popup by Supsystic < 1.7.9 - Cross-Site Request Forgery
Published: September 7, 2016
- Affected versions
- [*, 1.7.9)
- Patched versions
- 1.7.9
Highest-Severity Records
CriticalCVE-2024-52434
Popup by Supsystic <= 1.10.29 - Authenticated (Admin+) Remote Code Execution
Published: November 15, 2024
- Affected versions
- *-1.10.29
- Patched versions
- 1.10.30
HighCVE-2016-10915
Popup by Supsystic < 1.7.9 - Cross-Site Request Forgery
Published: September 7, 2016
- Affected versions
- [*, 1.7.9)
- Patched versions
- 1.7.9
HighCVE-2023-3186
Popup by Supsystic <= 1.10.18 - Prototype Pollution
Published: June 23, 2023
- Affected versions
- [*, 1.10.19)
- Patched versions
- 1.10.19
MediumCVE-2023-39997
Popup by Supsystic <= 1.10.19 - Cross-Site Request Forgery
Published: August 11, 2023
- Affected versions
- *-1.10.19
- Patched versions
- 1.10.20
MediumCVE-2021-24275
Popup by Supsystic <= 1.10.4 - Reflected Cross-Site Scripting
Published: April 19, 2021
- Affected versions
- *-1.10.4
- Patched versions
- 1.10.5
MediumCVE-2022-0424
Popup by Supsystic <= 1.10.8 - Sensitive Information Disclosure
Published: April 18, 2022
- Affected versions
- [*, 1.10.9)
- Patched versions
- 1.10.9
MediumCVE-2024-31421
Popup by Supsystic <= 1.10.27 - Missing Authorization
Published: April 10, 2024
- Affected versions
- *-1.10.27
- Patched versions
- 1.10.28
MediumCVE-2023-46197
Popup by Supsystic <= 1.10.19 - Missing Authorization to Sensitive Information Exposure
Published: October 18, 2023
- Affected versions
- *-1.10.19
- Patched versions
- 1.10.20
Need help reviewing an exposed WordPress website?
Running an affected version does not prove that a website was compromised. Suspicious redirects, unknown administrators, injected content, unexpected files or recurring malware may require a manual investigation.
Vulnerability data: Wordfence Intelligence. Analysis and practical guidance: 3Zero Digital.
Data Source, Attribution and Methodology
This page aggregates active Production Feed records. Counts are not software-quality rankings, and an affected version does not prove exploitation or infection. Read the full methodology.