WordPress security by component

Popup – MailChimp, GetResponse and ActiveCampaign Intergrations

Plugin description

Popup – MailChimp, GetResponse and ActiveCampaign Intergrations is a WordPress component with 2 published CVE records in this archive. The latest tracked vulnerability was published Jan 07, 2025; the highest CVE/CNA score is 7.5.

Plugin slug: ultimate-popup-creator

Latest vulnerability

CVE-2024-12158: Popup – MailChimp, GetResponse and ActiveCampaign Intergrations: A security weakness

Popup – MailChimp, GetResponse and ActiveCampaign Intergrations is affected by a security weakness. The vulnerable path is reachable without authentication. The resulting impact depends on how the affected component exposes the vulnerable operation.

PublishedJan 07, 2025

Safe version guidanceSee mitigation notes

		Safe version
Jan 07, 2025	CVE-2024-12158 Popup – MailChimp, GetResponse and ActiveCampaign Intergrations: A security weakness Popup – MailChimp, GetResponse and ActiveCampaign Intergrations is affected by a security weakness. The vulnerable path is reachable without authentication. The resulting impact depends on how the affected component exposes the vulnerable operation.	See mitigation notes	CVE5.3 NVDPending
Jan 07, 2025	CVE-2024-12157 Popup – MailChimp, GetResponse and ActiveCampaign Intergrations: SQL injection Popup – MailChimp, GetResponse and ActiveCampaign Intergrations is affected by SQL injection. The vulnerable path is reachable without authentication. A successful request can alter database queries and expose or modify WordPress data.	See mitigation notes	CVE7.5 NVDPending