https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-06T20:33:47.928787+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2022-29859 cnvd-2022-29859 2026-10-06T20:33:47.932138+00:00 cnvd-2022-29859 https://cve.radiocsirt.org/vuln/euvd-2026-11000 EUVD-2026-11000 2026-10-06T20:33:47.932171+00:00 EUVD-2026-11000 https://cve.radiocsirt.org/vuln/fkie_cve-2022-0479 fkie_cve-2022-0479 2026-10-06T20:33:47.932185+00:00

The Popup Builder WordPress plugin before 4.1.1 does not sanitise and escape the sgpb-subscription-popup-id parameter before using it in a SQL statement in the All Subscribers admin dashboard, leading to a SQL injection, which could also be used to perform Reflected Cross-Site Scripting attack against a logged in admin opening a malicious link

 https://cve.radiocsirt.org/vuln/ghsa-3m2q-xc74-xcj8 GHSA-3m2q-xc74-xcj8 2026-10-06T20:33:47.932213+00:00

The Popup Builder WordPress plugin before 4.1.1 does not sanitise and escape the sgpb-subscription-popup-id parameter before using it in a SQL statement in the All Subscribers admin dashboard, leading to a SQL injection, which could also be used to perform Reflected Cross-Site Scripting attack against a logged in admin opening a malicious link

 https://cve.radiocsirt.org/vuln/gsd-2022-0479 gsd-2022-0479 2026-10-06T20:33:47.932230+00:00 gsd-2022-0479