Skip to content
OpenAdvisories

Vendor

access-keys

1 known vulnerabilities.

1 result · Clear filters · Feed

  • High 8.8

    WP Popup Banners <= 1.2.5 - Authenticated (Subscriber+) SQL Injection

    The WP Popup Banners plugin for WordPress is vulnerable to SQL Injection via the 'banner_id' parameter in versions up to, and including, 1.2.5 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL q…