Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

5 records

Vendor: Hector Cabrera Component: Wordpress Popular Posts Clear all filters
TI-2022-21260 CVE-2022-43468 · GHSA-3p4m-vv4f-vw54

External initialization of trusted variables or data stores vulnerability exists in…

Priority MEDIUM 41

External initialization of trusted variables or data stores vulnerability exists in WordPress Popular Posts 6.0.5 and earlier, therefore the vulnerable product accepts untrusted external inputs to update certain internal…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00927 Published 2022-12-07 No fix listed CWE-665
TI-2021-18778 CVE-2021-42362 · GHSA-p9wv-phc4-8hqf

WordPress Popular Posts <= 5.3.2 Authenticated Arbitrary File Upload

Priority HIGH 78

The WordPress Popular Posts WordPress plugin is vulnerable to arbitrary file uploads due to insufficient input file type validation found in the ~/src/Image.php file which makes it possible for attackers with contributor…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.79823 Published 2021-11-17 No fix listed CWE-434
TI-2021-03972 CVE-2021-20746 · GHSA-pmfx-m292-fc24

Cross-site scripting in Hector Cabrera WordPress Popular Posts

Priority LOW 27

Cross-site scripting vulnerability in WordPress Popular Posts 5.3.2 and earlier allows a remote authenticated attacker to inject an arbitrary script via unspecified vectors.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.01442 Published 2021-06-28 No fix listed CWE-79