← Back

Slick Popup

slick-popup

Vendor: Omaksolutions • 2 CVEs

CVEs (2)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2023-46824
1Omaksolutions
1Slick Popup
Jun 17, 2026
Nov 6, 2023
N/A· v4
4.8 MEDIUM· v3
N/A· v2
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Om Ak Solutions Slick Popup: Contact Form 7 Popup Plugin plugin <= 1.7.14 versions.
CVE-2019-15867
1Omaksolutions
1Slick Popup
Jun 17, 2026
Sep 3, 2019
N/A· v4
8.8 HIGH· v3
6.5 MEDIUM· v2
The slick-popup plugin before 1.7.2 for WordPress has a hardcoded OmakPass13# password for the slickpopupteam account, after a Subscriber calls a certain AJAX action.