Read the docs

whiletrue

Records3All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high2CVSS 7.0–8.9

Exploited now

whiletrue records in CISA KEV

No whiletrue vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Most And Least Read Posts Widget 2 records LOW

Records

3 records

TI-2023-28572 CVE-2023-52133 · GHSA-g5jh-j87x-g57w

WordPress Most And Least Read Posts Widget Plugin <= 2.5.16 is vulnerable to SQL Injection

Priority LOW 39

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in WhileTrue Most And Least Read Posts Widget.This issue affects Most And Least Read Posts Widget: from n/a through 2.5.1…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00533 Published 2023-12-31 No fix listed CWE-89
TI-2024-33114 CVE-2024-49628 · GHSA-v69r-9546-4ccm

WordPress Most And Least Read Posts Widget plugin <= 2.5.18 - Cross Site Request Forgery (CSRF) vulnerability

Priority LOW 37

Cross-Site Request Forgery (CSRF) vulnerability in whiletrue Most And Least Read Posts Widget most-and-least-read-posts-widget allows Cross Site Request Forgery.This issue affects Most And Least Read Posts Widget: from n…

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00208 Published 2024-10-20 No fix listed CWE-352
TI-2025-26291 CVE-2025-39549 · GHSA-5vc9-m9gx-8qqw

WordPress Most And Least Read Posts Widget plugin <= 2.5.20 - Cross Site Scripting (XSS) Vulnerability

Priority LOW 29

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in whiletrue Most And Least Read Posts Widget most-and-least-read-posts-widget allows Stored XSS.This issue affects Most…

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.0036 Published 2025-04-16 No fix listed CWE-79
Open these records in search →