WordPress Plugin Vulnerabilities

Top 10 <= 1.9.2 - Setting Manipulation CSRF

Description

The Top 10 – Popular posts plugin for WordPress WordPress plugin was affected by a Setting Manipulation CSRF security vulnerability.

Affects Plugins

Plugin icon
top-10
Fixed in 1.9.3

Classification

Type
CSRF
OWASP top 10
A2: Broken Authentication and Session Management
CWE
CWE-352

Miscellaneous

Verified
No
WPVDB ID
4507834d-38f1-45ed-ad35-b8e2fd6e425d

Timeline

Publicly Published
2014-08-01 (about 11 years ago)
Added
2014-08-01 (about 11 years ago)
Last Updated
2017-12-19 (about 8 years ago)

Other

Published
Title
Published
2023-11-28
Title
SVGator – Add Animated SVG Easily < 1.2.5 - API Token Update/Deletion & Import Projects via CSRF
Published
2024-12-12
Title
Category of Posts <= 1.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Published
2023-03-03
Title
WP Translitera <= p1.2.5 - Settings Update via CSRF
Published
2023-11-21
Title
WP All Export (Free < 1.4.1, Pro < 1.8.6) - Author+ PHAR Deserialization via CSRF
Published
2023-12-26
Title
Block IPs for Gravity Forms < 1.0.2 - Cross-Site Request Forgery