CVE-2021-25082 Scanner
CVE-2021-25082 Scanner - Remote Code Execution vulnerability in WordPress Popup Builder
Used 3.2k times · 3.4k assets checked · domain, subdomain, ipv4
CVE
CVE-2021-25082
8.8
CVSS
Description
The Popup Builder WordPress plugin before 4.0.7 does not validate and sanitise the sgpb_type parameter before using it in a require statement, leading to a Local File Inclusion issue. Furthermore, since the beginning of the string can be controlled, the issue can lead to RCE vulnerability via wrappers such as PHAR
Attack Vector
-
Privileges Req.
-
User Interaction
-
popup builder – create highly converting, mobile friendly marketing popups.
Updated Oct 24, 2026View on NVD →
S4E scanner
CVE history: popup builder – create highly converting, mobile friendly marketing popups.
Predict next CVE date with AIMonitor this CVE on your assets
S4E maps published CVEs to scanners and forecasts the next disclosure window for your stack.
Create a free account →