CVE-2023-28661

Name of the Vulnerable Software and Affected Versions WP Popup Banners WordPress Plugin version <= 1.2.5

Description The issue is an authenticated SQL injection vulnerability. It affects the value parameter in the get popup data action.

Recommendations For WP Popup Banners WordPress Plugin version <= 1.2.5, consider updating to a version greater than 1.2.5 to resolve the issue. As a temporary workaround, restrict access to the get popup data action to minimize the risk of exploitation. Avoid using the value parameter in the affected action until the issue is resolved.