Sensitive Data Exposure Vulnerability in Aethonic Poptics Popup Builder
CVE-2025-69025

4.3MEDIUM

Key Information:

Vendor

WordPress
Status
Poptics: Ai-powered Popup Builder For Lead Generation, Conversions, Exit-intent, Email Opt-ins & WooCommerce Sales
Vendor
CVE Published:
30 December 2025

What is CVE-2025-69025?

The Aethonic Poptics plugin, used for enhancing lead generation and conversions, is susceptible to a security issue that permits unauthorized retrieval of sensitive embedded data. This vulnerability poses significant risks to sites using this plugin, especially those relying on it for email opt-ins and WooCommerce sales. It affects versions up to and including 1.0.20, highlighting the necessity for plugin updates and security best practices to mitigate potential data leaks.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

Affected Version(s)

Poptics: AI-Powered Popup Builder for Lead Generation, Con, Exit-Intent, Email Opt-ins &amp; WooCommerce Sales <= n/a

References

https://patchstack.com/database/Wordpress/Plugin/poptics/...
vdb-entry

CVSS V3.1

Score:
4.3
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
None
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

daroo | Patchstack Bug Bounty Program
JSON
.