WordPress Popular Posts Plugin Unauthenticated Arbitrary Shortcode Execution Vulnerability

A vulnerability allowing unauthenticated users to execute arbitrary shortcodes has been identified in the WordPress Popular Posts plugin, affecting all versions through 7.1.0. The issue arises because the plugin does not properly validate input before processing shortcodes, allowing for unauthorized shortcode execution.

Impact

Exploitation of this vulnerability could lead to unauthorized execution of shortcodes, which may be used to inject and execute malicious code or actions on behalf of the user.

Remediation

Users are advised to update the WordPress Popular Posts plugin to version 7.2.0 or later.