Wordpress Popular Posts Project - vulnerabilities (CVEs)

5 CVEs in 1 products, 0 in the last 30 days, newest from 2023-10-18.

Products

• Wordpress Popular Posts - 5 CVEs

Newest CVEs of Wordpress Popular Posts Project

• CVE-2023-45607 - CVSS 6.5 (medium), 2023-10-18: Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in Hector Cabrera WordPress Popular Posts plugin <= 6.3.2 versions.
• CVE-2022-43468 - CVSS 7.5 (high), 2022-12-07: External initialization of trusted variables or data stores vulnerability exists in WordPress Popular Posts 6.0.5 and earlier, therefore the vulnerable…
• CVE-2021-42362 - CVSS 8.8 (high), 2021-11-17: The WordPress Popular Posts WordPress plugin is vulnerable to arbitrary file uploads due to insufficient input file type validation found in the…
• CVE-2021-36872 - CVSS 5.5 (medium), 2021-09-23: Authenticated Persistent Cross-Site Scripting (XSS) vulnerability in WordPress Popular Posts plugin (versions <= 5.3.3). Vulnerable at…
• CVE-2021-20746 - CVSS 5.4 (medium), 2021-06-28: Cross-site scripting vulnerability in WordPress Popular Posts 5.3.2 and earlier allows a remote authenticated attacker to inject an arbitrary script via…