Popup builder with Gamification, Multi-Step Popups, Page-Level Targeting, and WooCommerce Triggers vulnerabilities

3 known vulnerabilities in Popup builder with Gamification, Multi-Step Popups, Page-Level Targeting, and WooCommerce Triggers from Roxnor. 3 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.2 High severity

  Popup builder with Gamification, Multi-Step…: Improper Neutralization of Special Elements used in an SQL Command

  CVE-2025-13192Feb 5, 2026Roxnor

  The Popup builder with Gamification, Multi-Step Popups, Page-Level Targeting, and WooCommerce Triggers plugin for WordPress is vulnerable to generic SQL Injection via the multiple REST API endpoints in all versions up to, and including, 2.2.0 due to insufficie

• 7.5 High severity

  Popup builder with Gamification, Multi-Step…: Server-Side Request Forgery

  CVE-2025-10861Oct 24, 2025Roxnor

  The Popup builder with Gamification, Multi-Step Popups, Page-Level Targeting, and WooCommerce Triggers plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 2.1.4. This is due to insufficient validation on the

• 7.5 High severity

  Popup builder with Gamification, Multi-Step…: Improper Neutralization of Special Elements used in an SQL Command

  CVE-2025-10862Oct 9, 2025Roxnor

  The Popup builder with Gamification, Multi-Step Popups, Page-Level Targeting, and WooCommerce Triggers plugin for WordPress is vulnerable to SQL Injection in all versions up to, and including, 2.1.3. This is due to insufficient escaping on the 'id' parameter a