Sql injection

2023-03-2221:15:00

PRIOn knowledge base

www.prio-n.com

wp popup banners

sql injection

authenticated vulnerability

nvd

get_popup_data action

8.9 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

31.2%

JSON

The WP Popup Banners WordPress Plugin, version <= 1.2.5, is affected by an authenticated SQL injection vulnerability in the ‘value’ parameter in the get_popup_data action.

CPENameOperatorVersion
wp_popup_bannerseq1.2.3
wp_popup_bannerseq1.2.4
wp_popup_bannerseq1.2.2
wp_popup_bannerseq1.2.1
wp_popup_bannerseq1.2.0
wp_popup_bannerseq1.1.9
wp_popup_bannerseq1.1.8
wp_popup_bannerseq1.1.7
wp_popup_bannerseq1.1.6
wp_popup_bannerseq1.1.5

Name	Operator	Version
wp_popup_banners	eq	1.2.3
wp_popup_banners	eq	1.2.4
wp_popup_banners	eq	1.2.2
wp_popup_banners	eq	1.2.1
wp_popup_banners	eq	1.2.0
wp_popup_banners	eq	1.1.9
wp_popup_banners	eq	1.1.8
wp_popup_banners	eq	1.1.7
wp_popup_banners	eq	1.1.6
wp_popup_banners	eq	1.1.5