CVE-2021-36872

2021-09-2315:15:07

Google

osv.dev

5.8 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

19.5%

JSON

Authenticated Persistent Cross-Site Scripting (XSS) vulnerability in WordPress Popular Posts plugin (versions <= 5.3.3). Vulnerable at &widget-wpp[2][post_type].

CPENameOperatorVersion
wordpress-popular-postseq3.1.2-beta-1
wordpress-popular-postseq3.1.0-beta-1
wordpress-popular-postseq3.0.4-beta-5
wordpress-popular-postseq4.0.0
wordpress-popular-postseq3.2.0-beta-1
wordpress-popular-postseq4.0.2
wordpress-popular-postseq3.0.4-beta-2
wordpress-popular-postseq3.0.0-beta-2
wordpress-popular-postseq4.0.7-beta-4
wordpress-popular-postseq4.0.10

Name	Operator	Version
wordpress-popular-posts	eq	3.1.2-beta-1
wordpress-popular-posts	eq	3.1.0-beta-1
wordpress-popular-posts	eq	3.0.4-beta-5
wordpress-popular-posts	eq	4.0.0
wordpress-popular-posts	eq	3.2.0-beta-1
wordpress-popular-posts	eq	4.0.2
wordpress-popular-posts	eq	3.0.4-beta-2
wordpress-popular-posts	eq	3.0.0-beta-2
wordpress-popular-posts	eq	4.0.7-beta-4
wordpress-popular-posts	eq	4.0.10

Rows per page:

1-10 of 851

References

github.com/cabrerahector/wordpress-popular-posts/blob/master/changelog.md

patchstack.com/database/vulnerability/wordpress-popular-posts/wordpress-popular-posts-plugin-5-3-3-authenticated-persistent-cross-site-scripting-xss-vulnerability