High · 8.5 CVE-2023-52133 EUVD-2023-56807GHSA-g5jh-j87x-g57w

WordPress Most And Least Read Posts Widget Plugin <= 2.5.16 is vulnerable to SQL Injection

Published Dec 31, 2023 · Updated Apr 28, 2026 · Assigned by Patchstack

Vendor: whiletrue Product: Most And Least Read Posts Widget

Description

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in WhileTrue Most And Least Read Posts Widget.This issue affects Most And Least Read Posts Widget: from n/a through 2.5.16.

Affected products

Vendor	Product	Affected	Fixed
WhileTrue	Most And Least Read Posts Widget	≤ 2.5.16	—

References

https://patchstack.com/database/vulnerability/most-and-least-read-posts-widget/wordpress-most-and-least-read-posts-widget-plugin-2-5-16-sql-injection-vulnerability?_s_id=cve vdb-entry