CVE-2025-53993: WordPress JetPopup plugin <= 2.0.15 - Sensitive Data Exposure vulnerability
Published Aug 20, 2025
·Updated
Insertion of Sensitive Information Into Sent Data vulnerability in Crocoblock JetPopup jet-popup allows Retrieve Embedded Sensitive Data.This issue affects JetPopup: from n/a through <= 2.0.15.
Affected Software
1 affected component
Crocoblock JetPopup<=2.0.15
Remediation
Information
Update the WordPress JetPopup plugin to the latest available version (at least 2.0.15.1).
Event History
Aug 20, 2025
CVE Published
via MITRE·08:03 AM
Data Sourced
via MITRE·08:03 AM
DescriptionSeverityWeakness
Data Sourced
via NVD·08:15 AM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2025-53993?
CVE-2025-53993 is classified as a high-severity vulnerability due to its potential to leak sensitive data.
2
How do I fix CVE-2025-53993?
To fix CVE-2025-53993, update the Crocoblock JetPopup plugin to version 2.0.16 or later.
3
What types of systems are affected by CVE-2025-53993?
CVE-2025-53993 affects versions of Crocoblock JetPopup from n/a through 2.0.15.
4
What kind of data is at risk in CVE-2025-53993?
CVE-2025-53993 allows for the retrieval of embedded sensitive data, which could include personal or confidential information.
5
Who can exploit CVE-2025-53993?
CVE-2025-53993 can be exploited by unauthorized users who can access the affected JetPopup functionalities.