GCVE - cpe:2.3:a:wordpress_popular_posts:wordpress_popular

Approved changes feed: RSS · Atom

cpe:2.3:a:wordpress_popular_posts:wordpress_popular_posts:*:*:*:*:*:*:*:*

part: a version: * update: *

Vendor	Wordpress Popular Posts (`a0cf9278-15b9-56dc-84aa-5dbf9518bb09`)
Product	Wordpress Popular Posts (`9080e556-6b9f-5c74-858b-33faefa5e0f0`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*

Notes

Imported from gcve-enriched-dumps CVE data

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2021-42362`	vulnerable	2026-06-08 05:35:22.216744	WordPress Popular Posts <= 5.3.2 Authenticated Arbitrary File Upload HIGH (8.8) The WordPress Popular Posts WordPress plugin is vulnerable to arbitrary file uploads due to insufficient input file type validation found in the ~/src/Image.php file which makes it possible for attackers with contributor level access and above to upload malicious files that can be used to obtain remote code execution, in versions up to and including 5.3.2. Published: 2021-11-17T17:44:23.922Z Updated: 2024-09-16T18:45:18.029Z Open on db.gcve.eu Reference links https://blog.nintechnet.com/improper-input-validation-fixed-in-wordpress-popular-posts-plugin/ https://www.wordfence.com/vulnerability-advisories/#CVE-2021-42362 https://plugins.trac.wordpress.org/changeset/2542638/wordpress-popular-posts/trunk/src/Image.php https://wpscan.com/vulnerability/bd4f157c-a3d7-4535-a587-0102ba4e3009 http://packetstormsecurity.com/files/165376/WordPress-Popular-Posts-5.3.2-Remote-Code-Execution.html	Imported from gcve-enriched-dumps CVE data

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open this panel to browse, search, copy or download the JSON record.