CVE-2023-45607
Published Oct 18, 2023Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in Hector Cabrera WordPress Popular Posts plugin <= 6.3.2 versions.
- evidence mentions
- 1
- Buzz score
- 11.9
Vendor archive
wordpress_popular_posts_project CVEs
Beta · best-effort5 CVEs tagged to vendor wordpress_popular_posts_project — 0 Critical, 2 High, 3 Medium, 0 Low, 0 Unrated.
CVE-2022-43468
Published Dec 7, 2022External initialization of trusted variables or data stores vulnerability exists in WordPress Popular Posts 6.0.5 and earlier, therefore the vulnerable product accepts untrusted e…
CVE-2021-42362
Published Nov 17, 2021The WordPress Popular Posts WordPress plugin is vulnerable to arbitrary file uploads due to insufficient input file type validation found in the ~/src/Image.php file which makes i…
CVE-2021-36872
Published Sep 23, 2021Authenticated Persistent Cross-Site Scripting (XSS) vulnerability in WordPress Popular Posts plugin (versions <= 5.3.3). Vulnerable at &widget-wpp[2][post_type].
CVE-2021-20746
Published Jun 28, 2021Cross-site scripting vulnerability in WordPress Popular Posts 5.3.2 and earlier allows a remote authenticated attacker to inject an arbitrary script via unspecified vectors.
Showing 1-5 of 5 CVEsPage 1 of 1