Most And Least Read Posts Widget
Approved changes feed: RSS · Atom
cpe:2.3:a:whiletrue:most_and_least_read_posts_widget:*:*:*:*:*:*:*:*part: a version: * update: *
| Vendor | Whiletrue (184cbd91-9c16-56b6-b14c-d814b95967fe) |
|---|---|
| Product | Most And Least Read Posts Widget (0e49ae19-3fcb-5281-b5c3-d38e06565b80) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from purl2cpe mapping
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:github/wp-plugins/most-and-least-read-posts-widget |
purl2cpe | 2026-06-01 10:14:33.525120 |
pkg:github/wpplugins/most-and-least-read-posts-widget |
purl2cpe | 2026-06-01 10:14:33.525123 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2025-39549 |
vulnerable | 2026-06-08 07:23:06.744617 |
WordPress Most And Least Read Posts Widget plugin <= 2.5.20 - Cross Site Scripting (XSS) Vulnerability
MEDIUM (6.5)
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in whiletrue Most And Least Read Posts Widget most-and-least-read-posts-widget allows Stored XSS.This issue affects Most And Least Read Posts Widget: from n/a through <= 2.5.20.
Published: 2025-04-16T12:44:36.912Z
Updated: 2026-05-12T00:08:06.058Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-49628 |
vulnerable | 2026-06-08 06:50:14.380949 |
WordPress Most And Least Read Posts Widget plugin <= 2.5.18 - Cross Site Request Forgery (CSRF) vulnerability
MEDIUM (4.3)
Cross-Site Request Forgery (CSRF) vulnerability in whiletrue Most And Least Read Posts Widget most-and-least-read-posts-widget allows Cross Site Request Forgery.This issue affects Most And Least Read Posts Widget: from n/a through <= 2.5.18.
Published: 2024-10-20T10:10:40.644Z
Updated: 2026-04-28T16:10:26.271Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-52133 |
vulnerable | 2026-06-08 06:17:54.322897 |
WordPress Most And Least Read Posts Widget Plugin <= 2.5.16 is vulnerable to SQL Injection
HIGH (8.5)
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in WhileTrue Most And Least Read Posts Widget.This issue affects Most And Least Read Posts Widget: from n/a through 2.5.16.
Published: 2023-12-31T17:33:00.945Z
Updated: 2026-04-28T16:09:05.155Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.