Lucene search
+L

CVE-2022-0228

🗓️ 21 Feb 2022 10:46:06Reported by WPScanType 
cve
 cve
🔗 web.nvd.nist.gov👁 228 Views🌐 WEB

The Popup Builder WordPress plugin before 4.0.7 SQL injection vulnerabilit

Related
Detection
Affected
Refs
Paths
ReporterTitlePublishedViews
Family
attackerkb
attackerkb
CVE-2022-0228
21 Feb 202211:15
–attackerkb
bdu_fstec
BDU FSTEC
WordPress Popup Builder SQL Injection
28 Oct 202300:00
–bdu_fstec
cnnvd
CNNVD
WordPress Plugin Popup Builder SQL Injection Vulnerability
21 Feb 202200:00
–cnnvd
cnvd
CNVD
Wordpress插件Popup Builder SQL注入漏洞
23 Feb 202200:00
–cnvd
cvelist
Cvelist
CVE-2022-0228 Popup Builder < 4.0.7 - Admin+ SQL Injection
21 Feb 202210:46
–cvelist
euvd
EUVD
EUVD-2022-15425
3 Oct 202520:07
–euvd
nuclei
Nuclei
Popup Builder < 4.0.7 - SQL Injection
4 Nov 202602:04
–nuclei
nvd
NVD
CVE-2022-0228
21 Feb 202211:15
–nvd
openvas
OpenVAS
WordPress Popup Builder Plugin < 4.0.7 Multiple Vulnerabilities
1 Mar 202200:00
–openvas
osv_cve
osv_cve
CVE-2022-0228
21 Feb 202211:15
–osv_cve
Rows per page
NVD
Node
sygnoospopup_builderRange<4.0.7wordpress
[
  {
    "product": "Popup Builder – Create highly converting, mobile friendly marketing popups.",
    "vendor": "Unknown",
    "versions": [
      {
        "lessThan": "4.0.7",
        "status": "affected",
        "version": "4.0.7",
        "versionType": "custom"
      }
    ]
  }
]
ParameterPositionPathDescriptionCWE
orderbyquery param/wp-admin/admin-post.phpThe Popup Builder WordPress plugin before 4.0.7 does not validate and properly escape the orderby parameter before using it in a SQL statement in the admin dashboard, which could allow high privilege users to perform SQL injection.CWE-89

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

17 Jun 2026 04:20Current
7.1High risk
Vulners AI Score7.1
CVSS 26.5
CVSS 3.17.2
EPSS0.05263
228