PT-2022-26930 · WordPress · Wordpress Popular Posts

Mikemyers · Published 2022-12-07 · Updated 2022-12-09 · CVE-2022-43468

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions WordPress Popular Posts versions 6.0.5 and earlier

Description The issue allows external initialization of trusted variables or data stores, enabling the acceptance of untrusted external inputs to update internal variables. This can lead to the manipulation of the number of views for an article through crafted inputs.

Recommendations For WordPress Popular Posts versions 6.0.5 and earlier, update to a version later than 6.0.5 to resolve the issue.

Fix

Improper Initialization

Weakness Enumeration

CWE-665

Related Identifiers

CVE-2022-43468

Affected Products

Wordpress Popular Posts

References · 6

• https://osv.dev/vulnerability/CVE-2022-43468 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-43468 · Security Note
• https://github.com/cabrerahector/wordpress-popular-posts · Note
• https://t.me/cvenotify/39332 · Telegram Post
• https://jvn.jp/en/jp/JVN13927745/index.html · Note
• https://wordpress.org/plugins/wordpress-popular-posts · Note