Lucene search
+L

27 matches found

Vulnrichment
Vulnrichment
added 2021/09/23 3:00 p.m.10 views

CVE-2021-36872 WordPress Popular Posts plugin <= 5.3.3 - Authenticated Persistent Cross-Site Scripting (XSS) vulnerability

Authenticated Persistent Cross-Site Scripting XSS vulnerability in WordPress Popular Posts plugin versions = 5.3.3. Vulnerable at &widget-wpp2posttype...

5.5CVSS5.5AI score0.00585EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2021/09/23 3:00 p.m.28 views

CVE-2021-36872 WordPress Popular Posts plugin <= 5.3.3 - Authenticated Persistent Cross-Site Scripting (XSS) vulnerability

Authenticated Persistent Cross-Site Scripting XSS vulnerability in WordPress Popular Posts plugin versions = 5.3.3. Vulnerable at &widget-wpp2posttype...

5.5CVSS5.5AI score0.00585EPSS
SaveExploits0References2
Packet Storm
Packet Storm
added 2021/07/15 12:00 a.m.638 views

WordPress Popular Posts 5.3.2 Shell Upload

Exploit Title: WordPress Plugin Popular Posts 5.3.2 - Remote Code Execution RCE Authenticated Date: 15/07/2021 Exploit Author: Simone Cristofaro Vendor Homepage: https://it.wordpress.org/plugins/wordpress-popular-posts/ Software Link:...

SaveExploits0
ATTACKERKB
ATTACKERKB
added 2021/06/28 1:15 a.m.5 views

CVE-2021-20746

Cross-site scripting vulnerability in WordPress Popular Posts 5.3.2 and earlier allows a remote authenticated attacker to inject an arbitrary script via unspecified vectors...

5.4CVSS6AI score0.01442EPSS
SaveExploits1References5Affected Software1
Japan Vulnerability Notes
Japan Vulnerability Notes
added 2021/06/23 12:00 a.m.63 views

JVN#63066062: WordPress Plugin "WordPress Popular Posts" vulnerable to cross-site scripting

WordPress Plugin "WordPress Popular Posts" provided by Hector Cabrera contains a cross-site scripting vulnerability CWE-79. Impact A user with the administrative privilege may unintentionally execute a script on his/her web browser. Solution Update the plugin Update the plugin according to the...

5.4CVSS5.3AI score0.01442EPSS
SaveExploits1
WPVulnDB
WPVulnDB
added 2021/06/07 12:00 a.m.25 views

WordPress Popular Posts < 5.3.3 - Authenticated Code Injection

Jerome Bruandet from NinTechNet discovered a code injection issue in the plugin before 5.3.3: "When thumbnails settings are set to 'Custom field name' and 'Resize image from Custom field' they aren’t by default, a user with contributor role or above can bypass the file type verification, download...

2AI score
SaveExploits0References3Affected Software1
Patchstack
Patchstack
added 2021/06/07 12:00 a.m.13 views

WordPress Popular Posts plugin <= 5.3.2 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability

Authenticated Stored Cross-Site Scripting XSS vulnerability discovered by Yu Iwama of Secure Sky Technology Inc. and the JPCERT/CC Vulnerability Coordination Group in WordPress Popular Posts plugin versions = 5.3.2. Solution Update the WordPress Popular Posts plugin to the latest available versio...

1.3AI score
SaveExploits0References1Affected Software1
Rows per page
Query Builder