TI-2023-01390 CVE-2023-1471 · GHSA-gh6q-64q5-63q7WP Popup Banners <= 1.2.5 - Authenticated (Subscriber+) SQL InjectionPriority MEDIUM 42The WP Popup Banners plugin for WordPress is vulnerable to SQL Injection via the 'banner_id' parameter in versions up to, and including, 1.2.5 due to insufficient escaping on the user supplied parameter and lack of suffi…CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.0094 · Published 2023-03-17 · No fix listed CWE-89