CVE-2024-34367: Popup Box Team Popup Box

High severity, CVSS 7.1. EPSS: 0.2% chance of exploitation in the next 30 days.

Cross-Site Request Forgery (CSRF) vulnerability in Popup Box Team Popup box allows Cross-Site Scripting (XSS).This issue affects Popup box: from n/a through 4.1.2.

Affected products

• Popup Box Team Popup Box: up to and including 4.1.2
• WordPress Popup Box

Published 2024-05-06. Last modified 2026-06-17.