Lucene search

CVE-2020-9006

🗓️ 17 Feb 2020 14:25:33Reported by mitreType

Popup Builder plugin 2.2.8 through 2.6.7.6 for WordPress vulnerable to SQL injection via PHP Deserialization leading to Remote Code Executio

Reporter	Title	Published	Views	Family All 7
GithubExploit	Exploit for SQL Injection in Sygnoos Popup Builder	21 Jul 202005:39	–	githubexploit
CVE	CVE-2020-9006	17 Feb 202015:15	–	cve
Prion	Sql injection	17 Feb 202015:15	–	prion
Patchstack	WordPress Popup Builder plugin <= 2.6.7.6 - SQL injection (SQLi) vulnerability	16 Feb 202000:00	–	patchstack
WPVulnDB	Popup Builder < 3.0 - SQL injection via PHP Deserialization	16 Feb 202000:00	–	wpvulndb
NVD	CVE-2020-9006	17 Feb 202015:15	–	nvd
OpenVAS	WordPress Popup Builder Plugin 2.2.8 < 3.0 SQL Injection Vulnerability	25 Feb 202000:00	–	openvas

Source	Link
plugins	www.plugins.trac.wordpress.org/browser/popup-builder/tags/2.2.8/files/sg_popup_ajax.php
wpvulndb	www.wpvulndb.com/vulnerabilities/10073
wordpress	www.wordpress.org/plugins/popup-builder/
zeroauth	www.zeroauth.ltd/blog/2020/02/16/cve-2020-9006-popup-builder-wp-plugin-sql-injection-via-php-deserialization/

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

17 Feb 2020 14:33Current

10.0High risk

Vulners AI Score10.0

EPSS0.012