Skip to content

Known CVE

Popup Builder < 4.0.7 - SQL Injection

The Popup Builder WordPress plugin before 4.0.7 does not validate and properly escape the orderby and order parameters before using them in a SQL statement in the admin dashboard, which could allow high privilege users to perform SQL injection.

CVE-2022-0228

High2022CVSS 7.2CWE-89

time-based-sqli · cve2022 · wordpress · wp-plugin · wp · wpscan · popup-builder · sygnoos

Verified scans run this check after you prove you own the site.

All known CVEsView the checks catalogNational Vulnerability Database

Scan a website