A vulnerability classified as critical has been found in kutsy AJAX Hits Counter and Popular Posts Widget Plugin up to 0.10.210305 on WordPress. The impacted element is an unknown function. The manipulation leads to missing authorization.
This vulnerability is referenced as CVE-2026-24587. Remote exploitation of the attack is possible. No exploit is available.
