Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Release: Popup Builder – Create highly converting, mobile friendly marketing popups. 4.0.7 Clear all filters
TI-2022-00164 CVE-2022-0228 · GHSA-w3jc-m34v-m835

Popup Builder < 4.0.7 - Admin+ SQL Injection

Priority MEDIUM 40

The Popup Builder WordPress plugin before 4.0.7 does not validate and properly escape the orderby and order parameters before using them in a SQL statement in the admin dashboard, which could allow high privilege users t…

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.05263 Published 2022-02-21 Fixed in 4.0.7 CWE-89
TI-2021-07360 CVE-2021-25082 · GHSA-rgh6-hx6g-h7q7

Popup Builder < 4.0.7 - LFI to RCE

Priority MEDIUM 46

The Popup Builder WordPress plugin before 4.0.7 does not validate and sanitise the sgpb_type parameter before using it in a require statement, leading to a Local File Inclusion issue.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.05229 Published 2022-02-21 Fixed in 4.0.7 CWE-22