Medium · 4.3 CVE-2024-49628 EUVD-2024-43491GHSA-v69r-9546-4ccm

WordPress Most And Least Read Posts Widget plugin <= 2.5.18 - Cross Site Request Forgery (CSRF) vulnerability

Published Oct 20, 2024 · Updated Apr 28, 2026 · Assigned by Patchstack

Vendor: whiletrue Product: Most And Least Read Posts Widget

Description

Cross-Site Request Forgery (CSRF) vulnerability in whiletrue Most And Least Read Posts Widget most-and-least-read-posts-widget allows Cross Site Request Forgery.This issue affects Most And Least Read Posts Widget: from n/a through <= 2.5.18.

Affected products

Vendor	Product	Affected	Fixed
whiletrue	Most And Least Read Posts Widget	≤ 2.5.18	—

References

https://patchstack.com/database/Wordpress/Plugin/most-and-least-read-posts-widget/vulnerability/wordpress-most-and-least-read-posts-widget-plugin-2-5-18-cross-site-request-forgery-csrf-vulnerability?_s_id=cve vdb-entry