Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Vendor: whiletrue Clear all filters
TI-2025-26291 CVE-2025-39549 · GHSA-5vc9-m9gx-8qqw

WordPress Most And Least Read Posts Widget plugin <= 2.5.20 - Cross Site Scripting (XSS) Vulnerability

Priority LOW 29

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in whiletrue Most And Least Read Posts Widget most-and-least-read-posts-widget allows Stored XSS.This issue affects Most…

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.0036 Published 2025-04-16 No fix listed CWE-79
TI-2024-33114 CVE-2024-49628 · GHSA-v69r-9546-4ccm

WordPress Most And Least Read Posts Widget plugin <= 2.5.18 - Cross Site Request Forgery (CSRF) vulnerability

Priority LOW 37

Cross-Site Request Forgery (CSRF) vulnerability in whiletrue Most And Least Read Posts Widget most-and-least-read-posts-widget allows Cross Site Request Forgery.This issue affects Most And Least Read Posts Widget: from n…

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00208 Published 2024-10-20 No fix listed CWE-352
TI-2023-28572 CVE-2023-52133 · GHSA-g5jh-j87x-g57w

WordPress Most And Least Read Posts Widget Plugin <= 2.5.16 is vulnerable to SQL Injection

Priority LOW 39

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in WhileTrue Most And Least Read Posts Widget.This issue affects Most And Least Read Posts Widget: from n/a through 2.5.1…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00533 Published 2023-12-31 No fix listed CWE-89