Vulnerabilities / WP Popular Posts
WP Popular Posts vulnerabilities
Advisories WPSec published for WP Popular Posts. Other sources may list more. Its attack surface: WP Popular Posts on WPSec AttackSurface.
| Published | ID | Vulnerability | Severity | Fixed in |
|---|---|---|---|---|
| 2026-11-03 | WPSEC-2026-2433 | WP Popular Posts <= 7.4.3 - Unauthenticated Sensitive Information Exposure of Unpublished WPML Translations | Low 3.7 | 7.4.4 |
| 2026-11-03 | WPSEC-2026-2432 | WP Popular Posts <= 7.4.3 - Authenticated (Author+) Blind Server-Side Request Forgery via Post Image URLs | Medium 4.9 | 7.4.4 |
| 2026-11-03 | WPSEC-2026-2431 | WP Popular Posts <= 7.4.3 - Unauthenticated Sensitive Information Exposure via 'post_type' Parameter of the Widget REST Endpoint | Medium 5.3 | 7.4.4 |
License: CC BY 4.0