5 matches found
CVE-2021-42362
WordPress Popular Posts plugin
CVE-2023-45607
The CVE-2023-45607 entry concerns the WordPress Popular Posts plugin for WordPress, stating an authenticated (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in versions up to 6.3.2. Connected sources confirm the affected component is the WordPress Popular Posts plugin and identify ...
CVE-2021-20746
CVE-2021-20746 describes a Cross-Site Scripting vulnerability in the WordPress Popular Posts plugin (versions 5.3.2 and earlier). The flaw allows an authenticated remote attacker to inject arbitrary scripts via unspecified vectors, with an impact limited to the attacker’s browser context. Exploit...
CVE-2022-43468
CVE-2022-43468 affects WordPress Popular Posts (versions 6.0.5 and earlier). The vulnerability is described as external initialization of trusted variables or data stores, allowing untrusted external inputs to update internal variables, which can manipulate the number of views for an article. The...