Skip to content
OpenAdvisories

Product · ajay

WebberZone Top 10 — Popular Posts

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 6.4
    CVE-2026-110290

    WebberZone Top 10 <= 4.5.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'other_attributes' Block Attribute

    The WebberZone Top 10 — Popular Posts plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'other_attributes (parsed to inject instance_id) + undeclared is_widget' parameter in all versions up to, and including, 4.5.2 due to insufficient …

    ajay WebberZone Top 10 — Popular Posts Web / CMS
  • Medium 4.3
    CVE-2020-36761

    Top 10 <= 2.9.4 - Cross-Site Request Forgery Bypass

    The Top 10 plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 2.10.4. This is due to missing or incorrect nonce validation on the tptn_export_tables() function. This makes it possible for unauthenticated attacke…

    ajay WebberZone Top 10 — Popular Posts Web / CMS