CVE-2023-28661

Summary

The WP Popup Banners WordPress Plugin, version <= 1.2.5, is affected by an authenticated SQL injection vulnerability in the 'value' parameter in the get_popup_data action.

Affected Software

VendorProductVersion RangeStatus
n/aWP Popup Banners WordPress Plugin<= 1.2.5affected

Weaknesses

  • Authenticated SQL Injection

ADP Enrichment

CVE Program Container

Additional References

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: poc
    • Automatable: no
    • Technical Impact: total

References