🔎 Have you found a vulnerability in a WordPress plugin or theme? Report vulnerabilities in WordPress plugins and themes through our bug bounty program and earn a bounty on all in-scope submissions, while we handle the responsible disclosure process on your behalf.

Top 10 – WordPress Popular posts by WebberZone

Wordfence Intelligence > Vulnerability Database > WordPress Plugins > Top 10 – WordPress Popular posts by WebberZone

Information

Software Type	Plugin
Software Slug	top-10 (view on wordpress.org)
Software Status	Active
Software Author	ajay
Software Website	webberzone.com
Software Downloads	1,085,989
Software Active Installs	20,000
Software Record Last Updated	July 26, 2024

9 Vulnerabilities

Top 10 <= 3.3.2 - Cross-Site Request Forgery via edit_count_ajax

4.3

CVE ID Unknown

Nov 3, 2023

Researcher: Brandon James Roldan (tomorrowisnew)

4.3

CVE ID Unknown

Feb 22, 2023

Researchers:

4.4

CVE-2023-26008

Feb 22, 2023

Researcher: deokhunKim

4.3

CVE ID Unknown

Feb 20, 2023

Researchers:

4.3

CVE-2023-25993

Feb 20, 2023

Researcher: Rafshanzani Suhada

6.4

CVE-2022-4570

Dec 29, 2022

Researcher: István Márton

Top 10 <= 2.9.4 - Cross-Site Request Forgery Bypass

4.3

CVE-2020-36761

Sep 16, 2020

Researcher: Jerome Bruandet

7.4

CVE ID Unknown

Dec 13, 2017

Researcher: DefenceCode

6.1

CVE ID Unknown

Jul 15, 2016

Researcher: Yorick Koster,

Title	Status	CVE ID	CVSS	Researchers	Date
Top 10 <= 3.3.2 - Cross-Site Request Forgery via edit_count_ajax	Patched		4.3	Brandon James Roldan (tomorrowisnew)	November 3, 2023
Top 10 – Popular posts plugin for WordPress <= 3.2.4 - Missing Authorization on tptn_chart_data	Patched		4.3		February 22, 2023
Top 10 – Popular posts plugin - <= 3.2.4 - Authenticated(Admin+) Stored Cross-Site Scripting	Patched	CVE-2023-26008	4.4	deokhunKim	February 22, 2023
Top 10 – Popular posts plugin for WordPress <= 3.2.3 - Cross-Site Request Forgery via tptn_ajax_clearcache	Patched		4.3		February 20, 2023
Top 10 – Popular posts plugin for WordPress <= 3.2.3 - Missing Authorization on tptn_ajax_clearcache	Patched	CVE-2023-25993	4.3	Rafshanzani Suhada	February 20, 2023
Top 10 – Popular posts plugin for WordPress <= 3.2.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Blocks	Patched	CVE-2022-4570	6.4	István Márton	December 29, 2022
Top 10 <= 2.9.4 - Cross-Site Request Forgery Bypass	Patched	CVE-2020-36761	4.3	Jerome Bruandet	September 16, 2020
Top 10 – Popular posts plugin for WordPress <= 2.4.3 - SQL Injection	Patched		7.4	DefenceCode	December 13, 2017
Top 10 – Popular posts plugin for WordPress < 2.3.1 - Cross-Site Scripting	Patched		6.1	Yorick Koster,	July 15, 2016

Did you know Wordfence Intelligence provides free personal and commercial API access to our comprehensive WordPress vulnerability database, along with a free webhook integration to stay on top of the latest vulnerabilities added and updated in the database? Get started today!

Learn more

Want to get notified of the latest vulnerabilities that may affect your WordPress site?
Install Wordfence on your site today to get notified immediately if your site is affected by a vulnerability that has been added to our database.

Get Wordfence

The Wordfence Intelligence WordPress vulnerability database is completely free to access and query via API. Please review the documentation on how to access and consume the vulnerability data via API.

Documentation