CVE-2022-43468

State: Published
Severity: 7.5 High
Published: Dec 7, 2022
Updated: Apr 23, 2025
Reserved: Nov 16, 2022

Description

External initialization of trusted variables or data stores vulnerability exists in WordPress Popular Posts 6.0.5 and earlier, therefore the vulnerable product accepts untrusted external inputs to update certain internal variables. As a result, the number of views for an article may be manipulated through a crafted input.

Scores

CVSS	Score	Vector	Source
3.1	7.5 High	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N	CISA-ADP

Weaknesses

CWE-665 Improper Initialization

Affected Products

Product	Versions
WordPress Popular PostsHector Cabrera	6.0.5 and earlierAffected

References

https://wordpress.org/plugins/wordpress-popular-posts/
https://github.com/cabrerahector/wordpress-popular-posts/
https://jvn.jp/en/jp/JVN13927745/index.html

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.