WordPress Plugin Vulnerabilities

Unlimited PopUps <= 4.5.3 - Author+ SQL Injection

Description

The plugin does not sanitise or escape the did GET parameter before using it in a SQL statement, available to users as low as editor, leading to an authenticated SQL Injection

Proof of Concept

Affects Plugins

Plugin icon
unlimited-popups
No known fix

References

CVE
CVE-2021-24631
URL
https://codevigilant.com/disclosure/2021/wp-plugin-unlimited-popups/

Classification

Type
SQLI
OWASP top 10
A1: Injection
CWE
CWE-89
CVSS
8.2 (high)

Miscellaneous

Original Researcher
Shreya Pohekar of Codevigilant Project
Verified
Yes
WPVDB ID
9841176d-1d37-4636-9144-0ca42b6f3605

Timeline

Publicly Published
2021-10-07 (about 4 years ago)
Added
2021-10-07 (about 4 years ago)
Last Updated
2022-04-09 (about 3 years ago)

Other

Published
Title
Published
2024-11-04
Title
Photos, Files, YouTube, Twitter, Instagram, TikTok, Ecommerce Contest Gallery – Upload, Vote, Sell via PayPal, Social Share Buttons < 24.0.4 - Unauthenticated SQL Injection
Published
2021-03-16
Title
wpDataTables < 3.4.2 - Blind SQL Injection via start Parameter
Published
2025-05-21
Title
Binary MLM Plan < 5.0 - Unauthenticated SQL Injection
Published
2023-06-19
Title
MStore API < 3.9.8 - Unauthenticated Blind SQLi
Published
2023-04-13
Title
Cyr to Lat < 3.7 - Editor+ SQL Injection