Medium · 5.9 CVE-2023-26008 EUVD-2023-29895GHSA-r8g3-9qxx-g5x2

WordPress Top 10 Plugin <= 3.2.4 is vulnerable to Cross Site Scripting (XSS)

Published Mar 23, 2023 · Updated Apr 28, 2026 · Assigned by Patchstack

Description

Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Ajay D'Souza Top 10 – Popular posts plugin for WordPress plugin <= 3.2.4 versions.

Vendor	Product	Affected	Fixed
Ajay D'Souza	Top 10 – Popular posts plugin for WordPress	≤ 3.2.4	—