Skip to content
OpenAdvisories

Vendor

arrowplugins

2 known vulnerabilities.

1 result · Clear filters · Feed

  • High 7.5
    CVE-2024-12157 Public exploit

    Popup – MailChimp, GetResponse and ActiveCampaign Intergrations <= 3.2.6 - Unauthenticated SQL Injection

    The Popup – MailChimp, GetResponse and ActiveCampaign Intergrations plugin for WordPress is vulnerable to SQL Injection via the 'id' parameter of the 'upc_delete_db_record' AJAX action in all versions up to, and including, 3.2.6 due to insufficient escaping o…