Trending/Popular Post Slider and Widget

Trending/Popular Post Slider and Widget has 3 disclosed vulnerabilities in the WordSec catalog, reported between 2023 and 2026; all 3 are fixed as of September 2026. Their average CVSS score is 6.5, and the most serious one scores 9.8 out of 10. Severity breakdown: 1 critical and 0 high. 2023 was the busiest year with 2 disclosures.

The most common weakness is Cross-Site Request Forgery (CSRF), behind 1 of the records (33%). Other recurring categories include Embedded Malicious Code, Missing Authorization.

Every one of the 3 issues recorded for Trending/Popular Post Slider and Widget has a vendor fix available, so running the current release closes all known holes.

3 independent researchers contributed these findings, one record each.

01234567891030.03.2023Today30.03.20234.3Trending/Popular Post Slider and Widget <= 1.5.7 - Cross-Site Request Forgery via wtpsw_post_view_count CVSS 4.3 · 30.03.202316.08.20235.3Multiple WPOnlineSupport Plugins <= (Various Versions) - Missing Authorization to Notice Dismissal CVSS 5.3 · 16.08.202309.04.20269.8Essentialplugin Plugins (Various Versions) - Injected Backdoor CVSS 9.8 · 09.04.2026

Strategic Overview

Avg CVSSMedium
6.5/ 10
Patch Coverage100%
Open

0

Fixed

3

Get automatic notifications for all Trending/Popular Post Slider and Widget vulnerabilities before they are exploited.

Highest severity on recordCVSS 9.8CVE-2026-6443

Essentialplugin Plugins (Various Versions) - Injected Backdoor

Read the full analysis

Vulnerability Records

3 records
Showing 1–3 of 3 reports

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C