Really Simple Security logo

Log out
Get PRO

Latest

Input validation vulnerability in Popup Builder 1.1.35

  • Severity: high-risk
  • Status: Open
  • Publication: April 22, 2025

The Popup Builder plugin for WordPress has a security issue. This problem, known as Local File Inclusion, affects versions 1.1.35 and below. It allows attackers who are logged in and have a certain level of access to include and run any type of files on the server. This means they can execute any PHP code in those files. This can be used to get around security measures, get important information, or run code if the attacker can upload and include supposedly safe files like images.

Detected in:

Popup Builder – Create highly converting, mobile friendly marketing popups. fixed vulnerable versions:
Popup Builder open vulnerable versions: >= * <= 1.1.35

This information is sourced from www.wpvulnerability.com. An open-source database of vulnerabilities maintained by the community. Help us out by submitting vulnerabilities!

Version compare shows which versions have a vulnerability. For example: >= 2.2.8 <= 2.2.21 means:

> from 2.2.8
= including 2.2.8 & 2.2.21
< to 2.2.21

  • Incorrect?

Is this information incorrect? Please leave us a message.