The Fast & Effective Popups & Lead-Generation for WordPress plugin before 2.1.4 concatenates user input into an SQL query without escaping it first in the plugin's report API endpoint, which could allow administrators in…
CVSS 3.1MEDIUM 4.9·Network·High privileges·No interaction·EPSS 0.00752·Published 2023-05-30·Fixed in 2.1.4