Wordpress Popular Posts Project Wordpress Popular Posts — known CVE vulnerabilities

Every CVE whose affected-product data names Wordpress Popular Posts Project Wordpress Popular Posts, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (5)

• CVE-2021-42362 — CVSS 8.8 (high): The WordPress Popular Posts WordPress plugin is vulnerable to arbitrary file uploads due to insufficient input file type validation found…
• CVE-2022-43468 — CVSS 7.5 (high): External initialization of trusted variables or data stores vulnerability exists in WordPress Popular Posts 6.0.5 and earlier, therefore…
• CVE-2023-45607 — CVSS 6.5 (medium): Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in Hector Cabrera WordPress Popular Posts plugin <= 6.3.2 versions.
• CVE-2021-36872 — CVSS 5.5 (medium): Authenticated Persistent Cross-Site Scripting (XSS) vulnerability in WordPress Popular Posts plugin (versions <= 5.3.3). Vulnerable at…
• CVE-2021-20746 — CVSS 5.4 (medium): Cross-site scripting vulnerability in WordPress Popular Posts 5.3.2 and earlier allows a remote authenticated attacker to inject an…