CVE-2026-94388: WordPress Green Popups plugin < 7.6.3 - SQL Injection vulnerability
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in halfdata Green Popups halfdata-green-popups allows Blind SQL Injection.This issue affects Green Popups: from n/a before 7.6.3.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
halfdata-green-popupsto a version that resolves this vulnerability.Fixed in 7.6.3
Event History
Frequently Asked Questions
Who can exploit this issue?
The listed vector indicates it can be exploited remotely over the network with no privileges or user interaction required. An attacker would need access to a reachable affected Green Popups installation.
What versions need remediation?
Green Popups versions before 7.6.3 are affected. Upgrade to version 7.6.3 or later.
What is the likely impact if exploitation succeeds?
The vulnerability is a blind SQL injection issue and is rated critical with high confidentiality impact and low availability impact. The supplied vector does not indicate an integrity impact.