Data Manipulation Vulnerability in WordPress Popular Posts Plugin by WordPress
CVE-2022-43468
7.5HIGH
Summary
A vulnerability exists in the WordPress Popular Posts plugin, allowing external manipulation of internal data. By accepting untrusted inputs, an attacker can alter the view counts of articles, potentially skewing analytics and affecting content visibility. This flaw impacts versions 6.0.5 and earlier, making prompt updates essential to maintain the integrity of web statistics and user engagement metrics.
Affected Version(s)
WordPress Popular Posts 6.0.5 and earlier
References
CVSS V3.1
Score:
7.5
Severity:
HIGH
Confidentiality:
None
Integrity:
High
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged
Timeline
Vulnerability published
Vulnerability Reserved