CVE-2025-14153

Name of the Vulnerable Software and Affected Versions Page Expire Popup/Redirection for WordPress plugin versions prior to 1.0

Description The Page Expire Popup/Redirection for WordPress plugin is susceptible to a time-based SQL Injection issue. This is due to inadequate escaping of user-supplied input and insufficient preparation of existing SQL queries, specifically through the id shortcode attribute. Authenticated attackers with Author-level access or higher can append additional SQL queries to existing ones, potentially extracting sensitive information from the database.

Recommendations Update the Page Expire Popup/Redirection for WordPress plugin to a version later than 1.0.