Read the docs

Hector Cabrera

Records5All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high2CVSS 7.0–8.9

Exploited now

Hector Cabrera records in CISA KEV

No Hector Cabrera vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Wordpress Popular Posts 5 records HIGH

Records

5 records in Wordpress Popular Posts · all components

TI-2021-18778 CVE-2021-42362 · GHSA-p9wv-phc4-8hqf

WordPress Popular Posts <= 5.3.2 Authenticated Arbitrary File Upload

Priority HIGH 78

The WordPress Popular Posts WordPress plugin is vulnerable to arbitrary file uploads due to insufficient input file type validation found in the ~/src/Image.php file which makes it possible for attackers with contributor…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.79823 Published 2021-11-17 No fix listed CWE-434
TI-2022-21260 CVE-2022-43468 · GHSA-3p4m-vv4f-vw54

External initialization of trusted variables or data stores vulnerability exists in…

Priority MEDIUM 41

External initialization of trusted variables or data stores vulnerability exists in WordPress Popular Posts 6.0.5 and earlier, therefore the vulnerable product accepts untrusted external inputs to update certain internal…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00927 Published 2022-12-07 No fix listed CWE-665
TI-2021-03972 CVE-2021-20746 · GHSA-pmfx-m292-fc24

Cross-site scripting in Hector Cabrera WordPress Popular Posts

Priority LOW 27

Cross-site scripting vulnerability in WordPress Popular Posts 5.3.2 and earlier allows a remote authenticated attacker to inject an arbitrary script via unspecified vectors.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.01442 Published 2021-06-28 No fix listed CWE-79
Open these records in search →