Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

2 records

Vendor: whiletrue Component: Most And Least Read Posts Widget Clear all filters
TI-2024-33114 CVE-2024-49628 · GHSA-v69r-9546-4ccm

WordPress Most And Least Read Posts Widget plugin <= 2.5.18 - Cross Site Request Forgery (CSRF) vulnerability

Priority LOW 37

Cross-Site Request Forgery (CSRF) vulnerability in whiletrue Most And Least Read Posts Widget most-and-least-read-posts-widget allows Cross Site Request Forgery.This issue affects Most And Least Read Posts Widget: from n…

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00208 Published 2024-10-20 No fix listed CWE-352
TI-2023-28572 CVE-2023-52133 · GHSA-g5jh-j87x-g57w

WordPress Most And Least Read Posts Widget Plugin <= 2.5.16 is vulnerable to SQL Injection

Priority LOW 39

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in WhileTrue Most And Least Read Posts Widget.This issue affects Most And Least Read Posts Widget: from n/a through 2.5.1…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00533 Published 2023-12-31 No fix listed CWE-89