Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
5.3

WP OnlineSupport Plugin Allows Unauthorized Access to Posts

CVE-2022-46846 · published 1 year ago
Summary

The WP OnlineSupport plugin has a security issue that allows unauthorized users to access posts they shouldn't be able to see. This affects the Trending/Popular Post Slider and Widget plugin, and users should update to the latest version to fix it. If not patched, an attacker could gain access to sensitive information.

Original advisory text
Missing Authorization vulnerability in WP OnlineSupport, Essential Plugin Trending/Popular Post Slider and Widget allows Exploiting Incorrectly Configured Access Control Security Levels.This issue ...
Missing Authorization vulnerability in WP OnlineSupport, Essential Plugin Trending/Popular Post Slider and Widget allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Trending/Popular Post Slider and Widget: from n/a through 1.5.7.
References
Fix within
Internet-facing 14 days
Internal 60 days
  • Not known to be exploited
  • Can be exploited automatically
  • Gives an attacker partial control
Severity
5.3 Medium
Exploitation
<1% chance of attack within 30 days
Type
CWE-862Missing Authorization
Timeline
Published13 Dec 2024
Updated4 Nov 2026
First seen7 Mar 2026
Sources
CVE-2022-46846 · NVD
Track software like this
Free during beta