roxnor Vulnerabilities and Affected Products
Vulnerabilities associated with PopupKit.
Products
Clear product- MetForm – Contact Form, Survey, Quiz, & Custom Form Builder for Elementor23 vulnerabilities
- ElementsKit Elementor Addons – Advanced Widgets & Templates Addons for Elementor19 vulnerabilities
- Popup builder with Gamification, Multi-Step Popups, Page-Level Targeting, and WooCommerce Triggers5 vulnerabilities
- EmailKit – Email Customizer for WooCommerce & WP4 vulnerabilities
- FundEngine4 vulnerabilities
- Wp Social Login and Register Social Counter4 vulnerabilities
- GetGenie3 vulnerabilities
- GetGenie – AI Content Writer with Keyword Research & SEO Tracking Tools3 vulnerabilities
- Metform3 vulnerabilities
- ShopEngine Elementor WooCommerce Builder Addon – All in One WooCommerce Solution3 vulnerabilities
- Wp Ultimate Review3 vulnerabilities
- ElementsKit Elementor addons Lite2 vulnerabilities
- PopupKit2 vulnerabilities
- EmailKit1 vulnerability
- FundEngine – Donation and Crowdfunding Platform1 vulnerability
| Vulnerability | Title and context | CVSS | EPSS | PoCs | Signals | STIX action |
|---|---|---|---|---|---|---|
CVE-2025-69026MEDIUM | WordPress PopupKit plugin <= 2.1.5 - Sensitive Data Exposure vulnerabilityExposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Roxnor PopupKit popup-builder-block allows Retrieve Embedded Sensitive Data.This issue affects PopupKit: from n/a through <= 2.1.5. CWE-497Dec 30, 2025 | CVSS4.3v3.1 | EPSS0.191% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2025-14314HIGH | WordPress PopupKit plugin <= 2.1.5 - SQL Injection vulnerabilityImproper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Roxnor PopupKit popup-builder-block allows Blind SQL Injection.This issue affects PopupKit: from n/a through <= 2.1.5. CWE-89Dec 18, 2025 | CVSS8.5v3.1 | EPSS0.369% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |