WordPress Popup Builder SQL Injection Vulnerability

WordPress is the WordPress Foundation's set of blogging platform developed using the PHP language. The platform supports setting up personal blog sites on PHP and MySQL servers.Popup Builder is a popup plugin used in it. A SQL injection vulnerability exists in the 'sgImportPopups' function of the...

PT-2020-20425

Name of the Vulnerable Software and Affected Versions Popup Builder plugin versions 2.2.8 through 2.6.7.6 Description The issue allows for SQL injection via PHP Deserialization on attacker-controlled data with the attachmentUrl POST variable in the sgImportPopups function in sg popup ajax.php. Th...

CVE-2020-9006: Improper Neutralization of Special Elements used in an SQL Command

The Popup Builder plugin 2.2.8 through 2.6.7.6 for WordPress is vulnerable to SQL injection in the sgImportPopups function in sgpopupajax.php via PHP Deserialization on attacker-controlled data with the attachmentUrl POST variable. This allows creation of an arbitrary WordPress Administrator...