CVEvulnerability

CVE-2022-43468

7.5 HIGH Published 2022-12-07 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2022-12-07
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
7.5 HIGH — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
CVSS 3.1 (134c704f-9b21-4f2e-91b3-4a467353bcc0)
7.5 HIGH — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
Weaknesses
CWE-665

Description

External initialization of trusted variables or data stores vulnerability exists in WordPress Popular Posts 6.0.5 and earlier, therefore the vulnerable product accepts untrusted external inputs to update certain internal variables. As a result, the number of views for an article may be manipulated through a crafted input.

Affected configurations

• wordpress popular posts project wordpress popular posts (<= 6.0.5)

Related

Weakness · CWE (1)

  • CWE-665 Improper Initialization weakness

Referenced by CWE · observed example (2)

  • CWE-1419 Incorrect Initialization of Resource weakness
  • CWE-454 External Initialization of Trusted Variables or Data Stores weakness

References