CVE-2025-13192 | Popup Builder with Gamification, Multi-Step Popups, Page-Level Targeting, and WooCommerce Triggers Plugin REST API Endpoint sql injection

A vulnerability, which was classified as critical, was found in Popup Builder with Gamification, Multi-Step Popups, Page-Level Targeting, and WooCommerce Triggers Plugin up to 2.2.0/2.2.1/2.2.3 on WordPress. The affected element is an unknown function of the component REST API Endpoint. The manipulation results in sql injection.

This vulnerability is reported as CVE-2025-13192. The attack can be launched remotely. No exploit exists.