CVE-2025-12122 | Popup Box Plugin up to 3.2.12 on WordPress Shortcode iframeBox cross site scripting

February 17, 2026 Yanac

A vulnerability classified as problematic has been found in Popup Box Plugin up to 3.2.12 on WordPress. Affected is the function iframeBox of the component Shortcode Handler. This manipulation causes cross site scripting.

This vulnerability is registered as CVE-2025-12122. Remote exploitation of the attack is possible. No exploit is available.VulDB Recent EntriesRead More