Description
WordPress Plugin Top 10-Popular posts for WordPress is prone to a cross-site request forgery vulnerability. Exploiting this issue may allow a remote attacker to perform certain administrative actions and gain unauthorized access to the affected application; other attacks are also possible. WordPress Plugin Top 10-Popular posts for WordPress version 1.9.2 is vulnerable; prior versions may also be affected.
Remediation
Update to plugin version 1.9.3 or latest
References
Related Vulnerabilities
PostgreSQL Time-of-check Time-of-use (TOCTOU) Race Condition Vulnerability (CVE-2024-7348)
WordPress Plugin BulletProof Security Cross-Site Scripting (.52.4)
MediaWiki CVE-2019-12473 Vulnerability (CVE-2019-12473)
phpMyAdmin 7PK - Security Features Vulnerability (CVE-2016-9850)
Plone CMS Server-Side Request Forgery (SSRF) Vulnerability (CVE-2021-33511)