WordPress Popular Posts
Moderate fix1 remedy
cpe:2.3:a:wordpress_popular_posts_project:wordpress_popular_posts:*:*:*:*:wordpress:*:*
Moderate fix1 remedy
- <= 7.1.0
WordPress Popular Posts Plugin Unauthenticated Arbitrary Shortcode Execution Vulnerability
Vulnerability
Patched
A vulnerability allowing unauthenticated users to execute arbitrary shortcodes has been identified in the WordPress Popular Posts plugin, affecting all versions through 7.1.0. The issue arises because the plugin does not properly validate input before processing shortcodes, allowing for unauthorized shortcode execution.
Impact
Exploitation of this vulnerability could lead to unauthorized execution of shortcodes, which may be used to inject and execute malicious code or actions on behalf of the user.
Remediation
Users are advised to update the WordPress Popular Posts plugin to version 7.2.0 or later.
Added: Jun 9, 2025, 7:46 PM
Updated: Jun 9, 2025, 7:46 PM
Vulnerability Rating
Custom Algorithm
spread
6.4impact
1.3exploitability
9.0remediation
7.7relevance
0.0threat
3.2urgency
2.9incentive
10.0Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.