Really Simple Security logo

Log out
Get PRO

Latest

Input validation vulnerability in Popup builder with Gamification, Multi-Step Popups, Page-Level Targeting, and WooCommerce Triggers 2.1.4

  • Severity: high-risk
  • Status: Fixed
  • Publication: October 23, 2025

A popular plugin called “Popup builder with Gamification, Multi-Step Popups, Page-Level Targeting, and WooCommerce Triggers” for WordPress has a security flaw that can be exploited by hackers. This flaw allows them to make requests to different websites through the plugin, even if they are not authenticated. This means they can access private information and gather information about the network. The issue was partially fixed in version 2.1.4.

Detected in:

Popup builder with Gamification, Multi-Step Popups, Page-Level Targeting, and WooCommerce Triggers fixed vulnerable versions: >= * <= 2.1.4

This information is sourced from www.wpvulnerability.com. An open-source database of vulnerabilities maintained by the community. Help us out by submitting vulnerabilities!

Version compare shows which versions have a vulnerability. For example: >= 2.2.8 <= 2.2.21 means:

> from 2.2.8
= including 2.2.8 & 2.2.21
< to 2.2.21

  • Incorrect?

Is this information incorrect? Please leave us a message.