Lucene search
K

7 matches found

Patchstack
Patchstack
added 2025/01/03 6:4 p.m.3 views

WordPress Popular Posts plugin <= 7.1.0 - Unauthenticated Arbitrary Shortcode Execution vulnerability

Unauthenticated Arbitrary Shortcode Execution vulnerability discovered by mikemyers in WordPress Plugin Popular Posts versions = 7.1.0...

7.3CVSS7.1AI score0.01083EPSS
Exploits0References1Affected Software1
CNNVD
CNNVD
added 2022/11/18 12:0 a.m.2 views

WordPress plugin Popular Posts 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A security vulnerability exists in the...

7.5CVSS6.5AI score0.00551EPSS
Exploits0References5
Cvelist
Cvelist
added 2021/11/17 5:44 p.m.26 views

CVE-2021-42362 WordPress Popular Posts <= 5.3.2 Authenticated Arbitrary File Upload

The WordPress Popular Posts WordPress plugin is vulnerable to arbitrary file uploads due to insufficient input file type validation found in the /src/Image.php file which makes it possible for attackers with contributor level access and above to upload malicious files that can be used to obtain...

8.8CVSS9.1AI score0.82414EPSS
Exploits5References6
CNNVD
CNNVD
added 2021/11/17 12:0 a.m.5 views

WordPress 代码问题漏洞

WordPress is a blogging platform developed using the PHP language, which supports setting up personal blogging sites on PHP and MySQL servers. WordPress plugin Popular Posts 5.3.2 and previous versions are vulnerable to arbitrary file uploads. An attacker could exploit the vulnerability to upload...

8.8CVSS6.4AI score0.82414EPSS
Exploits5References8
CVE
CVE
added 2021/09/23 3:0 p.m.45 views

CVE-2021-36872

CVE-2021-36872 affects WordPress Popular Posts plugin (versions

5.5CVSS5.2AI score0.00393EPSS
Exploits0References2Affected Software1
CNNVD
CNNVD
added 2021/09/23 12:0 a.m.3 views

WordPress 跨站脚本漏洞

WordPress is the WordPress Foundation's suite of blogging platforms developed using the PHP language. The platform supports the hosting of personal blog sites on servers with PHP and MySQL.The Wordpress plugin Popular Posts 5.3.3 and previous versions have a cross-site scripting vulnerability tha...

5.5CVSS5.4AI score0.00393EPSS
Exploits0References2
Japan Vulnerability Notes
Japan Vulnerability Notes
added 2021/06/30 2:36 a.m.6 views

WordPress Plugin "WordPress Popular Posts" vulnerable to cross-site scripting

Overview WordPress Plugin "WordPress Popular Posts" provided by Hector Cabrera contains a cross-site scripting vulnerability CWE-79. Yu Iwama of Secure Sky Technology Inc. reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning...

5.4CVSS6.2AI score0.00832EPSS
Exploits1References7
Rows per page
Query Builder