plugin

Modal Popup Box Vulnerabilities

2 known security issues reported for the Modal Popup Box WordPress plugin. Most recent disclosed Feb 11, 2026.

2 high

Running Modal Popup Box on your site? Check whether your installed version is affected.

Scan your site free

Modal Popup Box <= 1.6.1 - Authenticated (Contributor+) PHP Object Injection

high

The Modal Popup Box plugin for WordPress is vulnerable to PHP Object Injection in versions up to, and including, 1.6.1 via deserialization of untrusted input. This makes it possible for authenticated attackers, with contributor-level access and above, to inject a PHP Object. No known POP chain is present in the vulnera...

CVSS:
7.5
Affected:
up to 1.6.1
Fixed in:
1.6.2
Disclosed:
Feb 11, 2026

CVE-2025-68526 on NVD →

Modal Popup Box – Popup Builder, Show Offers And News in Popup <= 1.5.2 - Authenticated (Contributor+) PHP Object Injection in awl_modal_popup_box_shortcode

high

The Modal Popup Box – Popup Builder, Show Offers And News in Popup plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 1.5.2 via deserialization of untrusted input in the awl_modal_popup_box_shortcode function. This makes it possible for authenticated attackers, with contrib...

CVSS:
8.8
Affected:
up to 1.5.2
Fixed in:
1.5.3
Disclosed:
Apr 3, 2024

CVE-2024-2008 on NVD →

Protect your WordPress site

Run a free security scan to detect vulnerable plugins and themes, exposed files, and malware — no plugin install, no signup.

Scan your site free

← Back to the vulnerability database