Roxnor PopupKit SQL Injection Vulnerability in Popup Builder Block
Vulnerability
A blind SQL injection vulnerability has been identified in the Roxnor PopupKit WordPress plugin, specifically in the popup-builder-block component. This issue affects PopupKit versions through 2.1.5.
Impact
Exploitation of this vulnerability allows for blind SQL injection, where an attacker can manipulate SQL queries and potentially access or modify database information.
Added: Dec 18, 2025, 9:48 AM
Updated: Dec 18, 2025, 5:00 PM
Vulnerability Rating
Custom Algorithm
spread
0.0impact
2.5exploitability
7.4remediation
0.0relevance
1.5threat
0.0urgency
2.9incentive
5.8Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.