Is WP Popular Posts safe?

Every recorded flaw

• Oct 1, 2026WP Popular Posts: Sensitive Information ExposureCVE-2026-92548 · affects up to 7.4.2 · reported by WordfenceMedium 5.3
• Jan 3, 2025The WordPress Popular Posts: Arbitrary shortcode executionCVE-2024-11733 · affects up to 7.1.0 · reported by WordfenceHigh 7.3
• Oct 18, 2023Auth.CVE-2023-45607 · fixed in 6.3.3 · reported by PatchstackMedium 6.5
• Dec 6, 2022External initialization of trusted variables or data stores vulnerability exists in WordPress Popular Posts 6.0.5 and earlier, therefore the vulnerable product CVE-2022-43468 · affects up to 6.0.5 · reported by vultures@jpcert.or.jpHigh 7.5
• Nov 17, 2021WordPress Popular Posts: Arbitrary file uploadsCVE-2021-42362 · affects up to 5.3.2 · reported by Wordfence80% oddsHigh 8.8
• Sep 23, 2021WordPress Popular Posts: Authenticated Persistent Cross-Site Scripting (XSS)CVE-2021-36872 · affects up to 5.3.3 · reported by PatchstackMedium 5.5
• Jun 27, 2021WordPress Popular Posts 5.3.2 and earlier: Cross-site scriptingCVE-2021-20746 · affects up to 5.3.2 · reported by vultures@jpcert.or.jp1.4% oddsMedium 5.4

Records come from the National Vulnerability Database, published by the researchers who found each flaw (Wordfence, Patchstack, WPScan and others); exploited status from CISA; exploit odds from FIRST’s EPSS; current version, installs and closures from wordpress.org, checked daily. Want every plugin on your site checked at once? Run the free website check.