Skip to content
BackEsc
Sign in

Code-Atlantic · weakness class

Cross-site Scripting

7 CVEs

Every dot is a CVE in what this vendor ships; the named ones are the most at risk.

likely to be exploited
1

Every one of the 7 is a mark on the map. Named now: 1 to 7, most at risk first.

  1. Popup Maker < 1.16.5 - Admin+ Stored Cross-Site ScriptingCVE-2022-1104Code-Atlantic · 56% likely

    CWE-79

  2. Popup Maker < 1.16.11 - Contributor+ Stored Cross Site ScriptingCVE-2022-3690Code-Atlantic · CVSS 5.5 · 0.7% likely

    CWE-79

  3. Popup Maker < 1.16.9 - Contributor+ Stored XSS via ShortcodeCVE-2022-4362Code-Atlantic · CVSS 5.4 · 0.6% likely

    CWE-79

  4. Popup Maker < 1.16.9 - Contributor+ Stored XSS via Subscription FormCVE-2022-4381Code-Atlantic · CVSS 5.4 · 0.6% likely

    CWE-79

  5. Content Control < 1.1.10 - Contributor+ Stored XSSCVE-2022-4509Code-Atlantic · CVSS 5.4 · 0.5% likely

    CWE-79

  6. Popup Maker < 1.19.1 - Admin+ Stored XSSCVE-2024-5561Code-Atlantic · CVSS 4.8 · 0.5% likely

    CWE-79

  7. WordPress Popup Maker plugin <= 1.23.0 - Cross Site Scripting (XSS) vulnerabilityCVE-2026-28177Code Atlantic LLC · CVSS 7.1 · 0.3% likely

    CWE-79

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.

Data as of 2026-11-14. CVE List through 2026-11-14 · EPSS of 2026-11-13 · CISA KEV checked 2026-11-14. Sources: the CVE List, CISA KEV, EPSS, NVD, nuclei templates and public bug bounty data.

CyberSIXTSignal over noise
Updated AboutDevelopersSign in