CVE-2026-115223 — MEDIUM (4.9)

Vulnerability Description

The Smart Popup by Supsystic WordPress plugin before 2.0.2 does not prevent template-injection payloads from being stored in a popup text block and later evaluated by its template engine, because the filter meant to strip template delimiters runs before a decoding step that reconstructs them, allowing an authenticated administrator to execute arbitrary template expressions server-side and read PHP constants such as the site's database credentials and authentication keys.

CVSS Score

4.9

MEDIUM

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality

HIGH

Integrity

NONE

Availability

NONE

Related Weaknesses (CWE)

CWE-1336

References

https://wpscan.com/vulnerability/cf475664-aa8f-49ec-b1d6-62139dbad8d4/

FAQ

What is CVE-2026-115223?

CVE-2026-115223 is a vulnerability with a CVSS score of 4.9 (MEDIUM). The Smart Popup by Supsystic WordPress plugin before 2.0.2 does not prevent template-injection payloads from being stored in a popup text block and later evaluated by its template engine, because the ...

How severe is CVE-2026-115223?

CVE-2026-115223 has been rated MEDIUM with a CVSS base score of 4.9/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2026-115223?

Check the references section above for vendor advisories and patch information. Review vendor security bulletins for remediation guidance.