CVE-2020-9006

概要

参考情報

• plugins.trac.wordpress.org/browser/popup-builder/tags/2.2.8/files/sg_popup_ajax.php · Exploit
• wordpress.org/plugins/popup-builder · Release Notes
• wpvulndb.com/vulnerabilities/10073 · Third Party Advisory
• zeroauth.ltd/blog/2020/02/16/cve-2020-9006-popup-builder-wp-plugin-sql-injection-via-php-deserialization · Exploit

popup builder のその他の脆弱性

• CVE-2024-9428中 4.8The Popup Builder WordPress plugin before 4.3.5 does not sanitise and escape some of its settings, which could allow high privilege users s…
• CVE-2024-2541高 7.5The Popup Builder plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 4.3.6 via the S…
• CVE-2024-2544中 6.4The Popup Builder plugin for WordPress is vulnerable to unauthorized modification of data and loss of data due to a missing capability check…
• CVE-2023-6696高 8.1The Popup Builder – Create highly converting, mobile friendly marketing popups. plugin for WordPress is vulnerable to unauthorized access of…
• CVE-2023-6294高 7.2The Popup Builder WordPress plugin before 4.2.6 does not validate a parameter before making a request to it, which could allow users with th…