Lucene search
K

16 matches found

NVD
NVD
added 2026/01/05 11:17 a.m.1 views

CVE-2025-68033

Insertion of Sensitive Information Into Sent Data vulnerability in Brecht Custom Related Posts custom-related-posts allows Retrieve Embedded Sensitive Data.This issue affects Custom Related Posts: from n/a through = 1.8.0...

7.5CVSS0.00037EPSS
Exploits0References1
CVE
CVE
added 2026/01/05 10:39 a.m.9 views

CVE-2025-68033

The CVE-2025-68033 entry concerns Custom Related Posts (Brecht) for WordPress, affecting versions up to 1.8.0. It is an Unauthenticated Information Exposure vulnerability described as Insertion of Sensitive Information Into Sent Data, enabling retrieval of embedded sensitive data. Wordfence detai...

7.5CVSS5.9AI score0.00037EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2026/01/05 10:39 a.m.1 views

CVE-2025-68033 WordPress Custom Related Posts plugin <= 1.8.0 - Sensitive Data Exposure vulnerability

Insertion of Sensitive Information Into Sent Data vulnerability in Brecht Custom Related Posts allows Retrieve Embedded Sensitive Data.This issue affects Custom Related Posts: from n/a through 1.8.0...

7.5CVSS6.5AI score0.00037EPSS
Exploits0References1
Cvelist
Cvelist
added 2026/01/05 10:39 a.m.23 views

CVE-2025-68033 WordPress Custom Related Posts plugin <= 1.8.0 - Sensitive Data Exposure vulnerability

Insertion of Sensitive Information Into Sent Data vulnerability in Brecht Custom Related Posts custom-related-posts allows Retrieve Embedded Sensitive Data.This issue affects Custom Related Posts: from n/a through = 1.8.0...

7.5CVSS0.00037EPSS
Exploits0References1
CNNVD
CNNVD
added 2026/01/05 12:0 a.m.3 views

WordPress plugin Custom Related Posts 安全漏洞

...

7.5CVSS6.8AI score0.00037EPSS
Exploits0References2
Patchstack
Patchstack
added 2025/12/25 9:5 a.m.4 views

WordPress Custom Related Posts plugin <= 1.8.0 - Sensitive Data Exposure vulnerability

Sensitive Data Exposure vulnerability discovered by MD ISMAIL in WordPress Plugin Custom Related Posts versions = 1.8.0...

7.5CVSS6.9AI score0.00037EPSS
Exploits0Affected Software1
EUVD
EUVD
added 2025/10/03 8:7 p.m.1 views

EUVD-2025-12323

Malicious code in bioql PyPI...

6.5CVSS7.2AI score0.00128EPSS
Exploits0References2
RedhatCVE
RedhatCVE
added 2025/05/23 7:11 a.m.6 views

CVE-2024-12825

The Custom Related Posts plugin for WordPress is vulnerable to unauthorized access & modification of data due to a missing capability check on three AJAX actions in all versions up to, and including, 1.7.3. This makes it possible for authenticated attackers, with Subscriber-level access and above...

5.4CVSS6.5AI score0.00078EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/04/25 11:33 p.m.5 views

CVE-2025-46227

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Brecht Custom Related Posts custom-related-posts allows Stored XSS.This issue affects Custom Related Posts: from n/a through = 1.7.4...

6.5CVSS7.2AI score0.00128EPSS
Exploits0References1
NVD
NVD
added 2025/04/22 10:15 a.m.6 views

CVE-2025-46227

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Brecht Custom Related Posts custom-related-posts allows Stored XSS.This issue affects Custom Related Posts: from n/a through = 1.7.4...

6.5CVSS0.00128EPSS
Exploits0References1
CVE
CVE
added 2025/04/22 9:53 a.m.45 views

CVE-2025-46227

CVE-2025-46227 is a Cross-Site Scripting (XSS) vulnerability in the Brecht Custom Related Posts WordPress plugin. The issue is an improper neutralization of input during web page generation, enabling stored XSS. Affected versions are up to and including 1.7.4 (n/a through 1.7.4). The vulnerabilit...

6.5CVSS7.2AI score0.00128EPSS
Exploits0References1Affected Software1
Cvelist
Cvelist
added 2025/04/22 9:53 a.m.10 views

CVE-2025-46227 WordPress Custom Related Posts plugin <= 1.7.4 - Cross Site Scripting (XSS) Vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Brecht Custom Related Posts custom-related-posts allows Stored XSS.This issue affects Custom Related Posts: from n/a through = 1.7.4...

6.5CVSS0.00128EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2025/04/22 12:0 a.m.1 views

PT-2025-17494 · Unknown · Brecht Custom Related Posts

Name of the Vulnerable Software and Affected Versions: Brecht Custom Related Posts versions n/a through 1.7.4 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Stored XSS. This means that an attacker...

6.5CVSS6.8AI score0.00128EPSS
Exploits0References6
OSV
OSV
added 2025/02/01 8:15 a.m.1 views

CVE-2024-12825

The Custom Related Posts plugin for WordPress is vulnerable to unauthorized access & modification of data due to a missing capability check on three AJAX actions in all versions up to, and including, 1.7.3. This makes it possible for authenticated attackers, with Subscriber-level access and above...

5.4CVSS5.8AI score0.00078EPSS
Exploits0References2
NVD
NVD
added 2025/02/01 8:15 a.m.16 views

CVE-2024-12825

The Custom Related Posts plugin for WordPress is vulnerable to unauthorized access & modification of data due to a missing capability check on three AJAX actions in all versions up to, and including, 1.7.3. This makes it possible for authenticated attackers, with Subscriber-level access and above...

5.4CVSS0.00078EPSS
Exploits0References2
Patchstack
Patchstack
added 2025/02/01 12:7 a.m.1 views

WordPress Custom Related Posts plugin <= 1.7.3 - Missing Authorization to Authenticated (Subscriber+) Private Post Search and Relation Updates vulnerability

Missing Authorization to Authenticated Subscriber+ Private Post Search and Relation Updates vulnerability discovered by Lucio Sá in WordPress Plugin Custom Related Posts versions = 1.7.3...

5.4CVSS7AI score0.00078EPSS
Exploits0References1Affected Software1
Rows per page
Query Builder