← All advisories

Medium severity5.9NVD Advisory· Published Mar 23, 2023· Updated Jun 17, 2026

CVE-2023-26008

CVE-2023-26008

Description

Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Ajay D'Souza Top 10 – Popular posts plugin for WordPress plugin <= 3.2.4 versions.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3

Top 10 Popular Posts Project/Top 10 Popular Posts
cpe:2.3:a:top_10_-_popular_posts_project:top_10_-_popular_posts:*:*:*:*:*:wordpress:*:*
Range: <=3.2.4
WordPress/Top 10llm-fuzzy
Range: <=3.2.4
Package: https://wordpress.org/plugins/top-10
Ajay D'Souza/Top 10 – Popular posts plugin for WordPressv5
Range: n/a

Patches

Vulnerability mechanics

References

1

patchstack.com/database/vulnerability/top-10/wordpress-top-10-plugin-3-2-4-cross-site-scripting-xss-vulnerabilitynvdThird Party Advisory

News mentions

0

No linked articles in our index yet.