vulnerability

WordPress Plugin: popup-by-supsystic: CVE-2023-3186: Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')

Severity
7
CVSS
(AV:N/AC:M/Au:N/C:P/I:P/A:P)
Published
Jun 23, 2023
Added
May 15, 2025
Modified
Jul 10, 2025

Description

The plugin Popup by Supsystic for WordPress is vulnerable to prototype pollution, which could make injecting malicious web scripts possible in some cases.

Solution

popup-by-supsystic-plugin-cve-2023-3186
Title
NEW

Explore Exposure Command

Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.