CVE-2023-3186

CriticalCVSS 9.8

Published: 17/07/2023(UTC)Updated: 17/06/2026(UTC)Translated: 18/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Elevated risk

1.21%

64th percentile - higher than 64% of all known CVEs

Summary

The Popup by Supsystic WordPress plugin before 1.10.19 has a prototype pollution vulnerability that could allow an attacker to inject arbitrary properties into Object.prototype.

Risk Assessment

This vulnerability may lead to unauthorized access to data and manipulation of objects within the application, posing a serious security threat.

Recommendation

It is recommended to update the plugin to version 1.10.19 or later to mitigate this vulnerability.

Original NVD description (English source)

The Popup by Supsystic WordPress plugin before 1.10.19 has a prototype pollution vulnerability that could allow an attacker to inject arbitrary properties into Object.prototype.