CVE-2026-104023 supsysticcom CVE debrief

Who should care

Administrators of WordPress installations with the Smart Popup by Supsystic plugin should be aware of this vulnerability and take steps to mitigate it. They should verify their plugin version and update if necessary. Additionally, they can review compensating controls for exposed systems, monitor for suspicious database queries, and ensure that only trusted administrators have access to the plugin's settings.

Why it matters

This SQL Injection vulnerability in the Smart Popup by Supsystic plugin for WordPress allows authenticated administrators to append additional SQL queries, potentially leading to sensitive information extraction. Administrators should verify their plugin version and update if necessary.

• Potential extraction of sensitive information from the database.
• Possible disruption of database operations.
• Need for verification of plugin version and update to a patched version.
• Requirement for monitoring database queries for anomalies.

Technical summary

The Smart Popup by Supsystic plugin for WordPress, versions up to and including 1.13.2, is vulnerable to SQL Injection via the 'sidx' parameter due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This vulnerability allows authenticated attackers with administrator-level access to append additional SQL queries, potentially leading to sensitive information extraction from the database. The vulnerability exists because the plugin does not properly sanitize user input, allowing attackers to inject malicious SQL code.

Defensive priority

Administrators of WordPress installations with the Smart Popup by Supsystic plugin should verify their version and update to a patched version if available. They should also ensure that only trusted administrators have access to the plugin's settings.

Recommended defensive actions

• Verify the version of the Smart Popup by Supsystic plugin and update to a patched version if available.
• Ensure that only trusted administrators have access to the plugin's settings.
• Monitor for any suspicious database queries or anomalies.
• Review compensating controls for exposed systems while remediation is scheduled and verified.
• Check relevant monitoring, detection, and logs for exposed assets that need extra review.
• Track exceptions, retest remediated assets, and close the item only after evidence is documented.
• Confirm whether affected product deployments exist in managed environments and assign an owner for follow-up.

Evidence notes

The CVE record and source item provide details about the vulnerability, including its existence in versions up to 1.13.2 of the Smart Popup by Supsystic plugin. However, there is limited information on the exact impact, exploitation, or remediation steps beyond updating the plugin.

Sources and references

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.