CVE-2026-73380

The vulnerability allows unauthenticated PHP Object Injection in Popup by Supsystic versions up to 1.13.0, enabling attackers to exploit the application without authentication. This critical flaw can lead to remote code execution, potentially compromising the integrity and confidentiality of the affected systems. Organizations using this plugin should prioritize immediate patching or mitigation to safeguard against potential exploitation.