WordPress Plugin Vulnerabilities

Popup Builder < 4.0.7 - Admin+ SQL Injection

Description

The plugin does not validate and properly escape the orderby and order parameters before using them in a SQL statement in the admin dashboard, which could allow high privilege users to perform SQL injection

Proof of Concept

Affects Plugins

Plugin icon
popup-builder
Fixed in 4.0.7

References

CVE
CVE-2022-0228
URL
https://plugins.trac.wordpress.org/changeset/2659117

Classification

Type
SQLI
OWASP top 10
A1: Injection
CWE
CWE-89
CVSS
6.8 (medium)

Miscellaneous

Original Researcher
Tony Wu
Submitter
Tony Wu
Verified
Yes
WPVDB ID
22facac2-52f4-4e5f-be59-1d2934b260d9

Timeline

Publicly Published
2022-01-24 (about 3 years ago)
Added
2022-01-24 (about 3 years ago)
Last Updated
2022-04-10 (about 3 years ago)

Other

Published
Title
Published
2016-04-06
Title
All In One WP Security And Firewall < 4.0.7 - Multiple SQL Injections
Published
2024-09-18
Title
Welcart e-Commerce < 2.11.2 - Authenticated (Admin+) SQL Injection
Published
2014-08-01
Title
st_newsletter - (stnl_iframe.php) SQL Injection
Published
2025-08-15
Title
tPlayer <= 1.2.1.6 - Unauthenticated SQL Injection
Published
2022-02-21
Title
CommonsBooking < 2.6.8 - Unauthenticated SQL Injection