cve-2020-9006

CVE-2020-9006: Exploit per il plugin Popup-Builder di Wordpress Uso: root@kitploit: Create and upload payload Also see: php create-serialized-payload.php -h $ php create-serialized-payload.php | curl -F 'sprunge=-' http://sprunge.us http://sprunge.us/XXXXXX Run exploit $ nmap --script...

Slider & Popup Builder by Depicter <= 3.6.1 - Unauthenticated SQL Injection

The Slider & Popup Builder by Depicter plugin for WordPress is vulnerable to generic SQL Injection via the ‘s' parameter in all versions up to, and including, 3.6.1 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query.This makes ...

WordPress Popup Builder <= 4.2.3 - Unauthenticated Stored XSS

The Popup Builder WordPress plugin before 4.2.3 does not prevent simple visitors from updating existing popups, and injecting raw JavaScript in them, which could lead to Stored XSS attacks. id: CVE-2023-6000 info: name: WordPress Popup Builder = 4.2.3 - Unauthenticated Stored XSS author: riteshs4...

WP Popup Builder Popup Forms and Marketing Lead Generation <= 1.3.5 - Arbitrary Shortcode Execution

The The WP Popup Builder Popup Forms and Marketing Lead Generation plugin for WordPress is vulnerable to arbitrary shortcode execution via the wpajaxnoprivshortcodeApiAdd AJAX action in all versions up to, and including, 1.3.5. This is due to the software allowing users to execute an action that...

WordPress Popup Builder < 4.0.7 - Remote Code Execution

Popup Builder WordPress plugin before 4.0.7 contains a local file inclusion caused by unsanitized 'sgpbtype' parameter in require statement, letting attackers include arbitrary local files or execute code via wrappers like PHAR, exploit requires attacker to control 'sgpbtype' parameter. id:...

Popup Builder < 4.0.7 - SQL Injection

The Popup Builder WordPress plugin before 4.0.7 does not validate and properly escape the orderby and order parameters before using them in a SQL statement in the admin dashboard, which could allow high privilege users to perform SQL injection. id: CVE-2022-0228 info: name: Popup Builder 4.0.7 -...

Popup Builder Plugin - SQL Injection and Cross-Site Scripting

The Popup Builder WordPress plugin before 4.1.1 is vulnerable to SQL Injection and Reflected XSS via the sgpb-subscription-popup-id parameter. id: CVE-2022-0479 info: name: Popup Builder Plugin - SQL Injection and Cross-Site Scripting author: ritikchaddha severity: critical description: | The Pop...

CVE-2025-2011

CVE-2025-2011 - Vulnérabilité d'injection SQL du plugin Depicter Référence CVE : CVE-2025-2011 Ce dépôt contient un environnement de preuve de concept pour tester la vulnérabilité d'injection SQL dans le plugin Depicter Slider & Popup Builder versions 3.6.2. Prérequis Docker Docker Compose Python...

CVE-2023-6000

CVE-2023-6000 PoC Wie funktioniert diese Erkennungsmethode? Diese Vorlage prüft den folgenden Pfad: /wp-content/plugins/popup-builder/readme.txt Basierend auf dem angegebenen Stable Tag gilt die Version als verwundbar, wenn sie älter als 4.2.3 ist. Wie führe ich dieses Skript aus? 1. Lade Nuclei...

CVE-2025-2011

CVE-2025-2011 PoC Por: X3RX3S Mas orgulhosamente roubado por Ash Wesker que usou GPT no meu código com o banner dele ; veja aqui --- https://github.com/Ashwesker/Blackash-CVE-2025-2011 Você pode até ver meu nome de usuário no código 'dele' --' Propósito: Uma ferramenta de prova de conceito para...

CVE-2024-9061

CVE-2024-9061 WP Popup Builder – Popup-Formulare und Marketing-Lead-Generierung = 1.3.5 - Nicht authentifizierte willkürliche Shortcode-Ausführung über wpajaxnoprivshortcodeApiAdd Beschreibung Das Plugin WP Popup Builder – Popup-Formulare und Marketing-Lead-Generierung für WordPress ist anfällig...

CVE-2023-6000-POC

Dettagli Generali CVE-ID : CVE-2023-6000 Punteggio CVSS : 6.1 Tipo : XSS Memorizzato Stored XSS Versione Risolta : Popup Builder 4.2.3 Questa vulnerabilità consente a un attaccante di sfruttare una falla di Cross-Site Scripting XSS nel plugin WordPress Popup Builder. Il plugin non impedisce ai...

CVE-2024-52382

CVE-2024-52382 Matix Popup Builder = 1.0.0 - Atualização Não Autenticada de Opções Arbitrárias Descrição O plugin Matix Popup Builder para WordPress é vulnerável a modificação não autorizada de dados que pode levar à escalada de privilégios devido a uma falta de verificação de capacidade em uma...

CVE-2026-77116

Brave Popup Builder slug: brave-popup-builder has a broken access control issue in versions through 0.8.5. Any logged-in user - Subscriber or WooCommerce Customer is enough — can read popup content they shouldn't have access to by passing a post ID in the URL...

CVE-2026-77115

Brave Popup Builder brave-popup-builder up to version 0.8.5 reflects UTM query parameters into popup form HTML without escaping them...

EUVD-2026-64639

Brave Popup Builder slug: brave-popup-builder has a broken access control issue in versions through 0.8.5. Any logged-in user - Subscriber or WooCommerce Customer is enough — can read popup content they shouldn't have access to by passing a post ID in the URL...

CVE-2026-77116

Brave Popup Builder (WordPress plugin, slug: brave-popup-builder) versions through 0.8.5 contain a broken access control vulnerability. Any authenticated user with a low-privilege role (Subscriber or WooCommerce Customer) can read unpublished popup content by passing a post ID in the URL, effecti...

CVE-2026-77115

Brave Popup Builder (WordPress plugin) versions up to 0.8.5 are affected by an unauthenticated reflected XSS vulnerability. The root cause is the reflection of UTM query parameters into popup form HTML without proper output escaping, allowing an attacker to inject arbitrary script via crafted URL...

EUVD-2026-64638

Brave Popup Builder brave-popup-builder up to version 0.8.5 reflects UTM query parameters into popup form HTML without escaping them...

CVE-2026-77116 Brave Popup Builder < 0.8.6 - Subscriber+ Unpublished Popup Disclosure via Preview

Brave Popup Builder slug: brave-popup-builder has a broken access control issue in versions through 0.8.5. Any logged-in user - Subscriber or WooCommerce Customer is enough — can read popup content they shouldn't have access to by passing a post ID in the URL...