{"cvss":7.1,"datePublished":"","dateUpdated":"","description":"WordPress Popup Maker plugin <= 1.23.0 - Cross Site Scripting (XSS) vulnerability | Affected: Code Atlantic / Popup Maker | CVSS: 7.1 (HIGH) | EPSS: 0.00251 | Used in malware: unknown | Not yet in CISA KEV: True","dueDate":"","exploited":true,"id":"CVE-2026-28177","kev_catalogs":["circl"],"knownRansomwareCampaignUse":"","product":"Popup Maker","severity":"HIGH","source":"circl_kev","title":"CVE-2026-28177","vendor":""}