Vulnerabilities and security researches formost-and-least-read-posts-widget most-and-least-read-posts-widget

Apr 18, 2025

CVE, Research URL: CVE-2025-39549
Home page URL: Security reports for Most And Least Read Posts Widget
Application: Most And Least Read Posts Widget
Date: Apr 16, 2025
Research Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in whiletrue Most And Least Read Posts Widget allows Stored XSS. This issue affects Most And Least Read Posts Widget: from n/a through 2.5.20.
Affected versions: Min -, max -.
Status: vulnerable

Oct 22, 2024

CVE, Research URL: CVE-2024-49628
Home page URL: Security reports for Most And Least Read Posts Widget
Application: Most And Least Read Posts Widget
Date: Oct 20, 2024
Research Description: Most And Least Read Posts Widget [most-and-least-read-posts-widget] < 2.5.19 CVE-2024-49628 [en] Cross-Site Request Forgery (CSRF) vulnerability in WhileTrue Most And Least Read Posts Widget allows Cross Site Request Forgery.This issue affects Most And Least Read Posts Widget: from n/a through 2.5.18.
Affected versions: Min -, max -.
Status: vulnerable

Jun 06, 2024

CVE, Research URL: CVE-2023-52133
Home page URL: Security reports for Most And Least Read Posts Widget
Application: Most And Least Read Posts Widget
Date: Dec 31, 2023
Research Description: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in WhileTrue Most And Least Read Posts Widget.This issue affects Most And Least Read Posts Widget: from n/a through 2.5.16.
Affected versions: Min -, max -.
Status: vulnerable