WordPress CVEs

Description

The WP Popup Banners WordPress Plugin, version <= 1.2.5, is affected by an authenticated SQL injection vulnerability in the 'value' parameter in the get_popup_data action.

Affected WordPress components

• wp-popup-banners Plugin · wp-popup-banners
  Confirmed match Homeless
  Version <= 1.2.5
  View on WordPress.org

A confirmed match is backed by the plugin or theme slug. A possible match is based on the product name only and should be verified.

Affected products and versions

• n/a WP Popup Banners WordPress Plugin — Version <= 1.2.5
• accesspressthemes wp_popup_banners — Version 1.0.1
• accesspressthemes wp_popup_banners — Version 1.0.2
• accesspressthemes wp_popup_banners — Version 1.0.3
• accesspressthemes wp_popup_banners — Version 1.0.4
• accesspressthemes wp_popup_banners — Version 1.0.5
• accesspressthemes wp_popup_banners — Version 1.0.6
• accesspressthemes wp_popup_banners — Version 1.0.7
• accesspressthemes wp_popup_banners — Version 1.0.8
• accesspressthemes wp_popup_banners — Version 1.0.9
• accesspressthemes wp_popup_banners — Version 1.1.0
• accesspressthemes wp_popup_banners — Version 1.1.1
• accesspressthemes wp_popup_banners — Version 1.1.2
• accesspressthemes wp_popup_banners — Version 1.1.3
• accesspressthemes wp_popup_banners — Version 1.1.4
• accesspressthemes wp_popup_banners — Version 1.1.5
• accesspressthemes wp_popup_banners — Version 1.1.6
• accesspressthemes wp_popup_banners — Version 1.1.7
• accesspressthemes wp_popup_banners — Version 1.1.8
• accesspressthemes wp_popup_banners — Version 1.1.9
• accesspressthemes wp_popup_banners — Version 1.2.0
• accesspressthemes wp_popup_banners — Version 1.2.1
• accesspressthemes wp_popup_banners — Version 1.2.2
• accesspressthemes wp_popup_banners — Version 1.2.3
• accesspressthemes wp_popup_banners — Version 1.2.4
• accesspressthemes wp_popup_banners — Version 1.2.5

References

• www.tenable.com https://www.tenable.com/security/research/tra-2023-2 Exploit, Third Party Advisory
• nvd.nist.gov Official NVD record