The plugin’s REST API endpoint for fetching WordPress resources constructs a database query by directly interpolating values into the SQL string instead of using $wpdb->prepare() for parameterized queries. This could allow an authenticated attacker with API access to manipulate the SQL query, potentially leading to unauthorized data access or modification.
This vulnerability affects the following application versions:
- Popup Builder by OptinMonster 2.5.2
- Popup Builder by OptinMonster 2.5.3
- Popup Builder by OptinMonster 2.6.2
- Popup Builder by OptinMonster 2.6.3
- Popup Builder by OptinMonster 2.6.4
- Popup Builder by OptinMonster 2.6.5
- Popup Builder by OptinMonster 2.6.6
- Popup Builder by OptinMonster 2.6.7
- Popup Builder by OptinMonster 2.6.8
- Popup Builder by OptinMonster 2.6.9
- Popup Builder by OptinMonster 2.6.10
- Popup Builder by OptinMonster 2.6.11
- Popup Builder by OptinMonster 2.6.12
- Popup Builder by OptinMonster 2.7.0
- Popup Builder by OptinMonster 2.8.0
- Popup Builder by OptinMonster 2.8.1
- Popup Builder by OptinMonster 2.9.0
- Popup Builder by OptinMonster 2.10.0
- Popup Builder by OptinMonster 2.11.0
- Popup Builder by OptinMonster 2.11.1
- Popup Builder by OptinMonster 2.11.2
- Popup Builder by OptinMonster 2.12.0
- Popup Builder by OptinMonster 2.12.1
- Popup Builder by OptinMonster 2.13.0
- Popup Builder by OptinMonster 2.13.1
- Popup Builder by OptinMonster 2.13.2
- Popup Builder by OptinMonster 2.13.3
- Popup Builder by OptinMonster 2.13.4
- Popup Builder by OptinMonster 2.13.5
- Popup Builder by OptinMonster 2.13.6
- Popup Builder by OptinMonster 2.13.7
- Popup Builder by OptinMonster 2.13.8
- Popup Builder by OptinMonster 2.14.0
- Popup Builder by OptinMonster 2.14.1
- Popup Builder by OptinMonster 2.15.0
- Popup Builder by OptinMonster 2.15.1
- Popup Builder by OptinMonster 2.15.2
- Popup Builder by OptinMonster 2.15.3
- Popup Builder by OptinMonster 2.16.0
- Popup Builder by OptinMonster 2.16.1
- Popup Builder by OptinMonster 2.16.2