WordPress Popup Builder SQL Injection Vulnerability

WordPress is the WordPress Foundation's set of blogging platform developed using the PHP language. The platform supports setting up personal blog sites on PHP and MySQL servers.Popup Builder is a popup plugin used in it. A SQL injection vulnerability exists in the 'sgImportPopups' function of the...

CVE-2020-9006: Improper Neutralization of Special Elements used in an SQL Command

The Popup Builder plugin 2.2.8 through 2.6.7.6 for WordPress is vulnerable to SQL injection in the sgImportPopups function in sgpopupajax.php via PHP Deserialization on attacker-controlled data with the attachmentUrl POST variable. This allows creation of an arbitrary WordPress Administrator...