wordpress popular posts project records
5 published records for vendor wordpress popular posts project.
Researcher profile
- Entered KEV
- 0 · 0%
- Weaponized
- 1 · 20%
- Pre-auth RCE
- 0
- With a fix record
- 20%
- Median publish → KEV
- No record has entered KEV
Recurring classes
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')3
- CWE-434 Unrestricted Upload of File with Dangerous Type1
- CWE-665 Improper Initialization1
The weakness classes this vendor ships most often: where to look.
CWEAttack profile
All records
5 records| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
59Plan | CVE-2021-42362Weaponized | WordPress Popular Posts <= 5.3.2 Authenticated Arbitrary File Uploadwordpress popular posts project · wordpress popular posts · CWE-434 | High8.8 | — | 79.8% | Nov 17, 2021 |
30Monitor | CVE-2022-43468No exploit | External initialization of trusted variables or data stores vulnerability exists in WordPress Popular Posts 6.0.5 and earlier, therefore thewordpress popular posts project · wordpress popular posts · CWE-665 | High7.5 | — | 0.9% | Dec 7, 2022 |
21Monitor | CVE-2021-20746No exploit | Cross-site scripting vulnerability in WordPress Popular Posts 5.3.2 and earlier allows a remote authenticated attacker to inject an arbitrarwordpress popular posts project · wordpress popular posts · CWE-79 | Medium5.4 | — | 1.4% | Jun 27, 2021 |
21Monitor | CVE-2021-36872No exploit | WordPress Popular Posts plugin <= 5.3.3 - Authenticated Persistent Cross-Site Scripting (XSS) vulnerabilitywordpress popular posts project · wordpress popular posts · CWE-79 | Medium5.4 | — | 0.5% | Sep 23, 2021 |
21Monitor | CVE-2023-45607No exploit | WordPress WordPress Popular Posts Plugin <= 6.3.2 is vulnerable to Cross Site Scripting (XSS)wordpress popular posts project · wordpress popular posts · CWE-79 | Medium5.4 | — | 0.3% | Oct 18, 2023 |
- CVE-2021-4236259Plan
WordPress Popular Posts <= 5.3.2 Authenticated Arbitrary File Upload
HighCVSS 8.8WeaponizedEPSS 79%wordpress popular posts project · wordpress popular postsNov 17, 2021
- CVE-2022-4346830Monitor
External initialization of trusted variables or data stores vulnerability exists in WordPress Popular Posts 6.0.5 and earlier, therefore the
HighCVSS 7.5No exploitEPSS 0%wordpress popular posts project · wordpress popular postsDec 7, 2022
- CVE-2021-2074621Monitor
Cross-site scripting vulnerability in WordPress Popular Posts 5.3.2 and earlier allows a remote authenticated attacker to inject an arbitrar
MediumCVSS 5.4No exploitEPSS 1%wordpress popular posts project · wordpress popular postsJun 27, 2021
- CVE-2021-3687221Monitor
WordPress Popular Posts plugin <= 5.3.3 - Authenticated Persistent Cross-Site Scripting (XSS) vulnerability
MediumCVSS 5.4No exploitEPSS 0%wordpress popular posts project · wordpress popular postsSep 23, 2021
- CVE-2023-4560721Monitor
WordPress WordPress Popular Posts Plugin <= 6.3.2 is vulnerable to Cross Site Scripting (XSS)
MediumCVSS 5.4No exploitEPSS 0%wordpress popular posts project · wordpress popular postsOct 18, 2023