Vulnerabilities / Smart Popup by Supsystic
Smart Popup by Supsystic vulnerabilities
Advisories WPSec published for Customer Engagement System – Popup Builder, Forms, CRM & Email Marketing Automation. Other sources may list more. Its attack surface: Smart Popup by Supsystic on WPSec AttackSurface.
| Published | ID | Vulnerability | Severity | Fixed in |
|---|---|---|---|---|
| 2026-10-23 | WPSEC-2026-1523 | Smart Popup by Supsystic <= 2.0.0 - Authenticated (Administrator+) SQL Injection via Popup Page and Category Display Lists | Medium 4.9 | 2.0.2 |
| 2026-10-23 | WPSEC-2026-1522 | Smart Popup by Supsystic <= 2.0.0 - Unauthenticated Server-Side Request Forgery via getMailchimpGroups AJAX Action | High 7.2 | 2.0.2 |
| 2026-10-23 | WPSEC-2026-1521 | Smart Popup by Supsystic <= 2.0.0 - Authenticated (Administrator+) Remote Code Execution via Server-Side Template Injection in Popup Content | High 7.2 | 2.0.2 |
License: CC BY 4.0