CVE-2026-73381

CriticalCVSS 9.1

Published: 18/08/2026(UTC)Translated: 18/08/2026(UTC)NVD NIST

Summary

Unauthenticated Broken Authentication vulnerability in Popup by Supsystic plugin versions up to 1.13.0. An attacker without authentication can bypass authentication mechanisms.

Risk Assessment

Potential unauthorized access to administrative functions or user data.

Recommendation

Update the Popup by Supsystic plugin to a version newer than 1.13.0.

Original NVD description (English source)

Unauthenticated Broken Authentication in Popup by Supsystic <= 1.13.0 versions.