CVE-2015-10124
CVSS 3.1 Score 9.8 of 10 (high)
Details
Summary
CVE-2015-10124 is a critical vulnerability affecting the Most Popular Posts Widget Plugin up to version 0.8 on WordPress. The issue lies within the function add_views/show_views in the file functions.php, which is susceptible to SQL injection. This vulnerability allows remote attackers to manipulate the plugin, potentially leading to serious data breaches or unauthorized access. To mitigate this risk, it is strongly advised to upgrade to version 0.9, which includes the necessary patch (a99667d11ac8d320006909387b100e9a8b5c12e1). VDB-241026 is the identifier assigned to this vulnerability.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.