title: Unlimited PopUps <= 4.5.3 - Author+ SQL Injection
description: The Unlimited PopUps WordPress plugin through 4.5.3 does not sanitise or escape the did GET parameter before using it in a SQL statement, available to users as low as editor, leading to an authenticated SQL Injection
problem types: CWE-89 SQL Injection
affected:
{
product: Unlimited PopUps
vendor: Unknown
versions:
lessThanOrEqual: 4.5.3, status: affected, version: 4.5.3, versionType: custom
}