Non notée
CVE-2022-0228 The Popup Builder WordPress plugin before 4.0.7 does not validate and properly escape the orderby and order parameters…
Description
The Popup Builder WordPress plugin before 4.0.7 does not validate and properly escape the orderby and order parameters before using them in a SQL statement in the admin dashboard, which could allow high privilege users to perform SQL injection
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Popup Builder – Create highly converting, mobile friendly marketing popups. 4.0 | premières → < 4.0.7 | 4.0.7 |
Autres CVE de Popup Builder – Create highly converting, mobile friendly marketing popups.
Les 4 CVE de Popup Builder – Create highly converting, mobile friendly marketing popups. →
CVE-2022-1894
The Popup Builder WordPress plugin before 4.1.11 does not escape and sanitize some settings, which could allow high…
Non notée
CVE-2022-0479
The Popup Builder WordPress plugin before 4.1.1 does not sanitise and escape the sgpb-subscription-popup-id parameter…
Non notée
CVE-2021-25082
The Popup Builder WordPress plugin before 4.0.7 does not validate and sanitise the sgpb_type parameter before using it…
Non notée