WordPress Popup Builder Plugin < 3.45 SQL Injection Vulnerability

The WordPress plugin Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can redistribute it and/or modify it...

CVE-2019-14695

Summary : CVE-2019-14695 affects the WordPress plugin Sygnoos Popup Builder, version prior to 3.45. The vulnerability is a SQL injection in com/libs/Table.php caused by mishandling the Subscribers Table ordering. Impact (as described) : A remote attacker could execute arbitrary SQL commands on th...