CVE-2021-20746: WordPress Popular Posts Project WordPress Popular Posts

Medium severity, CVSS 5.4. EPSS: 1.4% chance of exploitation in the next 30 days.

Cross-site scripting vulnerability in WordPress Popular Posts 5.3.2 and earlier allows a remote authenticated attacker to inject an arbitrary script via unspecified vectors.

Affected products

• WordPress Popular Posts Project WordPress Popular Posts: up to and including 5.3.2

Published 2021-06-28. Last modified 2026-06-17.