CVE-2025-2011

CVE-2025-2011 - Depicter 插件 SQL 注入漏洞 CVE 参考： CVE-2025-2011 本仓库包含一个用于测试 Depicter Slider & Popup Builder 插件（版本 3.6.2）中 SQL 注入漏洞的概念验证环境。 前提条件 Docker Docker Compose Python 3.x 所需 Python 包：requests、colorama 搭建说明 1. 启动环境 docker-compose up -d 2. 完成 WordPress 安装 打开浏览器并访问 http://localhost:5555 按照 WordPres...

WordPress Popup Builder <= 4.2.3 - Unauthenticated Stored XSS

The Popup Builder WordPress plugin before 4.2.3 does not prevent simple visitors from updating existing popups, and injecting raw JavaScript in them, which could lead to Stored XSS attacks. id: CVE-2023-6000 info: name: WordPress Popup Builder = 4.2.3 - Unauthenticated Stored XSS author: riteshs4...

Popup Builder Plugin - SQL Injection and Cross-Site Scripting

The Popup Builder WordPress plugin before 4.1.1 is vulnerable to SQL Injection and Reflected XSS via the sgpb-subscription-popup-id parameter. id: CVE-2022-0479 info: name: Popup Builder Plugin - SQL Injection and Cross-Site Scripting author: ritikchaddha severity: critical description: | The Pop...

CVE-2023-6000-POC

概要 CVE-ID : CVE-2023-6000 CVSSスコア : 6.1 タイプ : 保存型XSS 修正バージョン : Popup Builder 4.2.3 この脆弱性により、攻撃者はWordPress Popup Builderプラグインのクロスサイトスクリプティング（XSS）の欠陥を悪用できます。 このプラグインは、一般の訪問者が既存のポップアップを変更することを防止できず、攻撃者が特別に細工したリクエストをサーバーに送信することで、 ポップアップに悪意のあるスクリプトを注入でき、ユーザーがポップアップとやり取りしたときに実行されます。...

Slider & Popup Builder by Depicter <= 3.6.1 - Unauthenticated SQL Injection

The Slider & Popup Builder by Depicter plugin for WordPress is vulnerable to generic SQL Injection via the ‘s' parameter in all versions up to, and including, 3.6.1 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query.This makes ...

WordPress Popup Builder < 4.0.7 - Remote Code Execution

Popup Builder WordPress plugin before 4.0.7 contains a local file inclusion caused by unsanitized 'sgpbtype' parameter in require statement, letting attackers include arbitrary local files or execute code via wrappers like PHAR, exploit requires attacker to control 'sgpbtype' parameter. id:...

WP Popup Builder Popup Forms and Marketing Lead Generation <= 1.3.5 - Arbitrary Shortcode Execution

The The WP Popup Builder Popup Forms and Marketing Lead Generation plugin for WordPress is vulnerable to arbitrary shortcode execution via the wpajaxnoprivshortcodeApiAdd AJAX action in all versions up to, and including, 1.3.5. This is due to the software allowing users to execute an action that...

Popup Builder < 4.0.7 - SQL Injection

The Popup Builder WordPress plugin before 4.0.7 does not validate and properly escape the orderby and order parameters before using them in a SQL statement in the admin dashboard, which could allow high privilege users to perform SQL injection. id: CVE-2022-0228 info: name: Popup Builder 4.0.7 -...

CVE-2024-52382

CVE-2024-52382 Matix Popup Builder = 1.0.0 - 未認証の任意オプション更新 説明 WordPress用プラグインMatix Popup...

cve-2020-9006

CVE-2020-9006：Wordpress Popup-Builder 插件漏洞利用 用法： Create and upload payload Also see: php create-serialized-payload.php -h $ php create-serialized-payload.php | curl -F 'sprunge=-' http://sprunge.us http://sprunge.us/XXXXXX Run exploit $ nmap --script ./cve-2020-9006 --script-args...

CVE-2023-6000

CVE-2023-6000 PoC 这种检测方法是如何工作的？ 此模板会查看以下路径：/wp-content/plugins/popup-builder/readme.txt 根据列出的 Stable Tag，如果版本早于 4.2.3，则视为存在漏洞。 如何运行此脚本？ 1. 从此处下载 Nuclei 2. 将模板复制到你的本地系统 3. 运行以下命令：nuclei -u https://yourHost.com -t template.yaml 参考资料 https://nvd.nist.gov/vuln/detail/CVE-2023-6000...

CVE-2024-9061

CVE-2024-9061 WP Popup Builder – Popup Forms and Marketing Lead Generation = 1.3.5 - 認証なし任意ショートコード実行（wpajaxnoprivshortcodeApiAdd 経由） 説明 WordPress用プラグイン「WP Popup Builder – Popup Forms and Marketing Lead Generation」は、バージョン1.3.5以前のすべてのバージョンにおいて、wpajaxnoprivshortcodeApiAdd...

CVE-2025-2011

CVE-2025-2011 PoC 作者： X3RX3S 但自豪地被 Ash Wesker 剥离，这家伙用他的横幅对 GPT 了我的代码 ; 看这里 --- https://github.com/Ashwesker/Blackash-CVE-2025-2011 你甚至可以在“他”的代码里看到我的 handle --' 目的： 一个概念验证工具，用于测试针对 WordPress 站点的 SQL 注入漏洞（CVE-2025-2011）。 免责声明： 仅用于您拥有 或已获得明确书面许可的系统。未经授权的测试是非法且不道德的。 关于漏洞 : WordPress 插件 Slider & Popup...

CVE-2026-87915: Improper Neutralization of Input During Web Page Generation

The Popup Maker – Boost Sales, Conversions, Optins, Subscribers with the Ultimate WP Popup Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via valuesName Parameter in all versions up to, and including, 1.24.0 due to insufficient input sanitization and output escaping. Th...

CVE-2026-15797: Improper Neutralization of Input During Web Page Generation

The Popup Maker – Boost Sales, Conversions, Optins, Subscribers with the Ultimate WP Popup Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via posttitle in all versions up to, and including, 1.24.0 due to insufficient input sanitization and output escaping. This makes it...

EUVD-2026-81356

The Master Addons for Elementor WordPress plugin before 3.1.9 does not perform an authorization check on the AJAX action that deactivates its Popup Builder popups, relying only on a nonce that is publicly output to every visitor, allowing unauthenticated attackers to permanently disable any popup...

CVE-2026-91015: Missing Authorization

The Master Addons for Elementor WordPress plugin before 3.1.9 does not perform an authorization check on the AJAX action that deactivates its Popup Builder popups, relying only on a nonce that is publicly output to every visitor, allowing unauthenticated attackers to permanently disable any popup...

CVE-2026-76801: Improper Privilege Management

The FireBox – WooCommerce Popup Builder, Exit Intent Popup, Email Optin & Cart Abandonment plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 3.1.10 via the value function. This is due to a trivially bypassable regex blacklist in Executer::allowedToR...

CVE-2026-81571 Brave Popup Builder < 0.8.8 - Unauthenticated Arbitrary Shortcode Execution via UTM Parameter

The Brave WordPress plugin before 0.8.8 does not prevent a URL parameter used to pre-fill a form field from being passed to WordPress's shortcode engine, allowing unauthenticated attackers to have arbitrary shortcodes registered on the site executed server-side...

CVE-2026-77116

Brave Popup Builder slug: brave-popup-builder has a broken access control issue in versions through 0.8.5. Any logged-in user - Subscriber or WooCommerce Customer is enough — can read popup content they shouldn't have access to by passing a post ID in the URL...