WordPress security by component

Popup with fancybox

Plugin description

Popup with fancybox is a WordPress component with 1 published CVE record in this archive. The latest tracked vulnerability was published Nov 22, 2023; the highest CVE/CNA score is 8.8.

Plugin slug: popup-with-fancybox

Latest vulnerability

CVE-2023-5465: Popup with fancybox: SQL injection

Popup with fancybox is affected by SQL injection. Exploitation requires an authenticated WordPress account. A successful request can alter database queries and expose or modify WordPress data.

PublishedNov 22, 2023

Safe version guidanceSee mitigation notes

		Safe version
Nov 22, 2023	CVE-2023-5465 Popup with fancybox: SQL injection Popup with fancybox is affected by SQL injection. Exploitation requires an authenticated WordPress account. A successful request can alter database queries and expose or modify WordPress data.	See mitigation notes	CVE8.8 NVD8.8