| Package | Affected versions | Patched versions |
|---|---|---|
| popup builder | < 4.0.7 | 4.0.7 |
The Popup Builder WordPress plugin before 4.0.7 does not validate and properly escape the orderby and order parameters before using them in a SQL statement in the admin dashboard, which could allow high privilege users to perform SQL injection
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free