hcabrera vulnerabilities

Products

• WP Popular Posts 2
• Recently 1

Latest hcabrera CVEs

Newest publication first

1. CVE-2026-92548 WP Popular Posts <= 7.4.2 - Unauthenticated Information Disclosure in 'post_type' and 'context' Parameters

   Published 2026-10-01

   Medium·CVSS 5.3 EPSS 0.32%

   The WP Popular Posts plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 7.4.2 via the 'context' parameter. This makes it possible for unauthenticated attackers to extract sensitive edit-context fields — including raw title,...

2. CVE-2024-11733 WordPress Popular Posts <= 7.1.0 - Unauthenticated Arbitrary Shortcode Execution

   Published 2025-01-03

   High·CVSS 7.3 EPSS 0.50%

   The The WordPress Popular Posts plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 7.1.0. This is due to the software allowing users to execute an action that does not properly validate a value before running do_shortcode. Th...

3. CVE-2021-4382 Recently <= 3.0.4 - Arbitrary File Upload to Remote Code Exectution

   Published 2023-06-07

   High·CVSS 8.8 EPSS 1.6%

   The Recently plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the fetch_external_image() function in versions up to, and including, 3.0.4. This makes it possible for authenticated attackers to upload arbitrary files on the affect...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.