Most Popular Posts Widget

Most Popular Posts Widget has one disclosed vulnerability in the WordSec catalog, all reported in 2015; it is fixed as of September 2026. Their average CVSS score is 8.8, and the most serious one scores 8.8 out of 10. Severity breakdown: 0 critical and 1 high.

The most common weakness is SQL Injection, behind 1 of the records (100%).

The one issue recorded for Most Popular Posts Widget has a vendor fix available, so running the current release closes it.

Most Popular Posts Widget is installed on roughly 20 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 4.3.34.

Strategic Overview

Avg CVSSHigh
8.8/ 10
Patch Coverage100%
Open

0

Fixed

1

Get automatic notifications for all Most Popular Posts Widget vulnerabilities before they are exploited.

Highest severity on recordCVSS 8.8CVE-2015-10124

Most Popular Posts Widget <= 0.8 - Authenticated (Admin+) SQL Injection

Read the full analysis

Vulnerability Records

1 records
Most Popular Posts Widget banner
Latestv1.2.0

Most Popular Posts Widget

Piotr Pesta

Author

Piotr Pesta

0.0(0)
0/100
Last Updated
2015-09-18 (11y ago)
Active Installs
20+
Downloads
5,732
Requires WP
2.8.0+
Requires PHP
0+
Tested up to
WP 4.3.34
Created
2015-01-16 (12y ago)

Most Popular Posts is a widget that is able to display a list of the most popular posts of your site (ranked by number of visits or number of comments). With it you can show your visitors which content are most popular, and built-in styles give you the ability to customize its appearance to your page. Widget / plugin is ideal for small news sites and blogs. This is an excellent way to increase click-through rate and reduce the bounce rate of page. If you are worried about your server’s resources, I can assure you that the widget extremely tight cares about this issue. Its simple design makes you sure that the database on your server will not be filled with unnecessary data. You can customize: The title of the widget Rank posts popularity by number of comments or visits The number of the displayed items (to choose from 1 to 10) Showing only those posts that were visited by example. Last 30 days (to choose from range from 1 to 30 days) Disable or enable the display of the number of visits Exclude from displaying specific pages and whole categories (by their ID) Change translation Change the appearance of the widget (you can choose from 6 ready styles or create your own (file custom.css), along with subsequent updates of the number of available styles will increase) Clean the widget data from SQL database (if you decide that take too much) Cache refresh time In addition, the widget has a built-in filtering visits robots, so that the collected data do not include web bots. Widget styles perfectly cope with the parties and look great on mobile devices. Widget also support shortcode [most-popular-posts]. Widget is very simple to install and use, which should not be a straightforward problem to anyone. Widget could be not compatible with catching plugins, like W3 Total Cache etc. If you would like to show your support for this software, please consider donating: Donate via PayPal. Shortcode Usage If you wish to show widget in post first set up widget options and save them. After that just write [most-popular-posts] anywhere in your post.

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C