vulnerability in pop