How many themehunk wp popup builder CVEs are in CISA KEV?

None of themehunk wp popup builder's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.

Which versions of themehunk wp popup builder are affected?

11 distinct themehunk wp popup builder versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.

What are the most common weakness types in themehunk wp popup builder CVEs?

themehunk wp popup builder's CVEs most often map to these CWE weakness types: CWE-497 (Exposure of Sensitive System Information to an Unauthorized Control Sphere), CWE-79 (Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')), CWE-862 (Missing Authorization), CWE-94 (Improper Control of Generation of Code ('Code Injection')).

How many critical themehunk wp popup builder vulnerabilities are there?

themehunk wp popup builder has 1 critical and 0 high-severity CVEs.

What is the average severity of themehunk wp popup builder CVEs?

The average CVSS base score across themehunk wp popup builder's scored CVEs is 6.4.

RadicalNotion.AI

Log in Start free

Log in

Log in Start free

themehunk

4 CVEs

themehunk wp popup builder Vulnerabilities

Name: themehunk wp popup builder vulnerability dataset (CVEs)
Creator: RadicalNotion.AI
License: https://creativecommons.org/licenses/by-nc/4.0/

CVE security advisories and vulnerability history for wp popup builder by themehunk.

4

Total CVEs

Published

0

In CISA KEV

Exploited in the wild

2

Public exploits

PoC or exploit code

6.4

Avg CVSS

2022–2025

Last updated October 27, 2025

Overview

themehunk wp popup builder has 4 published CVE records since 2022, of which 0 are in CISA's Known Exploited Vulnerabilities catalog and 2 have a known public exploit. The average CVSS base score across scored CVEs is 6.4.

This page aggregates every publicly disclosed vulnerability (CVE) affecting themehunk wp popup builder, with a severity breakdown, the affected and patched versions, the most common weakness types, and the full CVE list.

Severity and exploitation

How the CVSS severity of themehunk wp popup builder's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.

Critical1

High0

Medium3

Low0

In CISA’s Known Exploited Vulnerabilities catalog

0

None of themehunk wp popup builder's CVEs are currently listed in CISA's KEV catalog.

Public exploits

2

2 of themehunk wp popup builder's CVEs have a known public exploit available.

Affected versions and CVEs

Browse every themehunk wp popup builder version named in a CVE, then pick one to see only the CVEs that affect it.

Version ranges

< 1.2.92 CVEs
< 1.3.61 CVE
<= 1.3.51 CVE
<= 1.3.61 CVE
<= 1.3.81 CVE
>= 1.3.91 CVE

Fixed in

1.2.92 CVEs
> 1.3.51 CVE
> 1.3.81 CVE
1.3.61 CVE
1.3.91 CVE

Find a version

4 CVEs

Sort

WordPress WP Popup Builder plugin <= 1.3.8 - Sensitive Data Exposure vulnerability
CVE-2025-62902
Patch
CWE-497
Medium · CVSS 5.3
EPSS 0.3% (21th pct)2025-10-27
WP Popup Builder – Popup Forms and Marketing Lead Generation <= 1.3.5 - Unauthenticated Arbitrary Shortcode Execution via wp_ajax_nopriv_shortcode_Api_Add
CVE-2024-9061
Patch
CWE-94
Critical · CVSS 9.8
EPSS 52.3% (99th pct)2024-10-16
Medium vulnerability · 2022-09-26
CVE-2022-2405
Public exploit
Patch
CWE-862
Medium · CVSS 4.3
EPSS 0.3% (20th pct)2022-09-26
Medium vulnerability · 2022-09-26
CVE-2022-2404
Public exploit
Patch
CWE-79
Medium · CVSS 6.1
EPSS 0.5% (41th pct)2022-09-26

Common weakness types

The CWE weakness categories most often found in themehunk wp popup builder CVEs. Follow any weakness for its full explanation.

Disclosure activity by year

How many themehunk wp popup builder CVEs were published each year.

2022

2

2024

1

2025

1

Other themehunk products

Browse vulnerabilities for other products by themehunk.

Contact Form & Lead Form Elementor Builder8 CVEs Lead Form Builder & Contact Form4 CVEs Vayu Blocks – Website Builder for the Block Editor3 CVEs advanced_wordpress_search2 CVEs Advance Product Search2 CVEs Advance WordPress Search Plugin2 CVEs Big Store2 CVEs Easy Mega Menu for WordPress – ThemeHunk2 CVEs

All themehunk vulnerabilities

Frequently asked questions

Common questions about themehunk wp popup builder vulnerabilities.

How many CVEs does themehunk wp popup builder have?: themehunk wp popup builder has 4 published CVE records since 2022.
How many themehunk wp popup builder CVEs are in CISA KEV?: None of themehunk wp popup builder's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.
Are there public exploits for themehunk wp popup builder vulnerabilities?: Yes — 2 of themehunk wp popup builder's CVEs have a known public exploit.
Which versions of themehunk wp popup builder are affected?: 11 distinct themehunk wp popup builder versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.
What are the most common weakness types in themehunk wp popup builder CVEs?: themehunk wp popup builder's CVEs most often map to these CWE weakness types: CWE-497 (Exposure of Sensitive System Information to an Unauthorized Control Sphere), CWE-79 (Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')), CWE-862 (Missing Authorization), CWE-94 (Improper Control of Generation of Code ('Code Injection')).
How many critical themehunk wp popup builder vulnerabilities are there?: themehunk wp popup builder has 1 critical and 0 high-severity CVEs.
What is the average severity of themehunk wp popup builder CVEs?: The average CVSS base score across themehunk wp popup builder's scored CVEs is 6.4.

References

Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.

Track themehunk wp popup builder vulnerabilities

Monitor new themehunk wp popup builder vulnerabilities as they are disclosed, with AI-written analysis and remediation guidance.

Start free See pricing