On December 11, 2023 WPScan published Marc Montpas’ research on the stored XSS vulnerability in the popular Popup Builder plugin (200,000+ active installation) that was … Continue reading Thousands of Sites with Popup Builder Compromised by Balada Injector