Unscored CVE-2023-28661 EUVD-2023-32322GHSA-w7w3-qjcp-5ccp

The WP Popup Banners WordPress Plugin, version <= 1.2.5, is affected by an authenticated SQL injection vulnerability in the 'value' paramet…

Published Mar 22, 2023 · Updated Feb 25, 2025 · Assigned by tenable

Description

The WP Popup Banners WordPress Plugin, version <= 1.2.5, is affected by an authenticated SQL injection vulnerability in the 'value' parameter in the get_popup_data action.

Affected products

Vendor	Product	Affected	Fixed
—	WP Popup Banners WordPress Plugin	<= 1.2.5	—

References

https://www.tenable.com/security/research/tra-2023-2