CVE-2021-42362
WordPress Popular Posts <= 5.3.2 Authenticated Arbitrary File Upload
The WordPress Popular Posts WordPress plugin is vulnerable to arbitrary file uploads due to insufficient input file type validation found in the ~/src/Image.php file which makes it possible for attackers with contributor level access and above to upload malicious files that can be used to obtain remote code execution, in versions up to and including 5.3.2.
We have discovered 3,512 live websites that are affected by CVE-2021-42362.
Affected Software
| Product |  WordPress Popular Posts |
| Category | Wordpress Plugins |
| Vulnerable Versions |
|
| Total Vulnerable Versions | 81 |
| Vulnerable Domains | 3,512 live websites (15.94% of WordPress Popular Posts install base) |
Details
- Published - Nov 12, 2021
- Updated - Nov 21, 2023
Credits
- Original Researcher: Jerome Bruandet, NinTechNet Exploit Author: Simone Cristofaro (finder)
CWE
CVE References
CWE References
Countries
 United States | 729 websites |
 Japan | 1,621 websites |
 Germany | 124 websites |
 France | 99 websites |
 GB | 86 websites |
 Russia | 80 websites |
 Poland | 68 websites |
 Spain | 60 websites |
 Italy | 55 websites |
TLDs
| .com | 1,812 websites |
| .jp | 312 websites |
| .net | 207 websites |
| .co.jp | 133 websites |
| .org | 117 websites |
| .de | 66 websites |
| .ru | 65 websites |
| .pl | 51 websites |
| .info | 49 websites |
| .fr | 37 websites |
Vulnerable Versions
Vulnerable versions are highlighted in redReferences
- https://blog.nintechnet.com/improper-input-validation-fixed-in-wordpress-popular-posts-plugin/
- https://www.wordfence.com/vulnerability-advisories/#CVE-2021-42362
- https://plugins.trac.wordpress.org/changeset/2542638/wordpress-popular-posts/trunk/src/Image.php
- https://wpscan.com/vulnerability/bd4f157c-a3d7-4535-a587-0102ba4e3009
- http://packetstormsecurity.com/files/165376/WordPress-Popular-Posts-5.3.2-Remote-Code-Execution.html
- https://github.com/cabrerahector/wordpress-popular-posts/commit/d9b274cf6812eb446e4103cb18f69897ec6fe601
Websites affected by CVE-2021-42362
Top websites that are affected by CVE-2021-42362. Please click on the "Contact us" link to get more information.| Domain | Country | Rank | Contacts |
|---|---|---|---|
| ***.**********.com | United States | *,*** | |
| ***************.com | United States | **,*** | |
| *******************.com | Japan | **,*** | |
| ********.tokyo | Japan | **,*** | |
| *****.***.**.uk | GB | **,*** | |
| ******.com | United States | **,*** | |
| ***.***************.com | United States | **,*** | |
| **************.com | United States | **,*** | |
| ***.**********.com | United States | **,*** | |
| ***.***********.com | United States | **,*** |