Last Viewed Posts by WPBeginner
Last Viewed Posts by WPBeginner has 2 disclosed vulnerabilities in the WordSec catalog, all reported in 2024; all 2 are fixed as of September 2026. Their average CVSS score is 7.6, and the most serious one scores 9.8 out of 10. Severity breakdown: 1 critical and 0 high. 2024 was the busiest year with 2 disclosures.
The most common weakness is Deserialization Of Untrusted Data, behind 1 of the records (50%). Other recurring categories include Improper Access Control.
Every one of the 2 issues recorded for Last Viewed Posts by WPBeginner has a vendor fix available, so running the current release closes all known holes.
All of these findings were reported by Francesco Carlucci. Last Viewed Posts by WPBeginner is installed on roughly 500 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 6.7.7.
CVE-2024-3070Last Viewed Posts by WPBeginner <= 1.0.0 - Unauthenticated PHP Object Injection
Read the full analysisVulnerability Records
Last Viewed Posts by WPBeginner
Author
jottlieb
Installing this will allow you to use a widget or template tag to show your site’s visitors a personalized list of posts and pages they have viewed. The list of posts is saved in each visitor’s web browser, so even if you get millions of visitors a month it won’t affect the performance of your website. Note: It doesn’t store a global list of recently viewed posts by all users. Nothing is stored in your site’s database. Every visitor has a custom lists of posts and pages they have viewed. If JavaScript is disabled or no single post has been clicked, no output will be displayed. The plugin comes with a widget and a template tag. This plugin has been adopted and maintained by WPBeginner What’s Next? To learn more about WordPress, you can visit WPBeginner for tutorials on topics like: WordPress Speed and Performance WordPress Security WordPress SEO …and many more WordPress tutorials. If you like our Last Viewed Posts plugin, then consider checking out our other projects: OptinMonster – Get More Email Subscribers with the most popular conversion optimization plugin for WordPress. WPForms – #1 drag & drop online form builder for WordPress (trusted by 4 million sites). MonsterInsights – See the Stats that Matter and Grow Your Business with Confidence. Best Google Analytics Plugin for WordPress. SeedProd – Create beautiful landing pages with our powerful drag & drop landing page builder. WP Mail SMTP – Improve email deliverability for your contact form with the most popular SMTP plugin for WordPress. RafflePress – Best WordPress giveaway and contest plugin to grow traffic and social followers. Smash Balloon – #1 social feeds plugin for WordPress – display social media content in WordPress without code. AIOSEO – the original WordPress SEO plugin to help you rank higher in search results (trusted by over 2 million sites). PushEngage – Connect with visitors after they leave your website with the leading web push notification plugin. TrustPulse – Add real-time social proof notifications to boost your store conversions by up to 15%. Visit WPBeginner to learn from our WordPress Tutorials and find out about other best WordPress plugins.
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C