CVE-2024-12634: Cross-Site Request Forgery (CSRF)

The Related Posts, Inline Related Posts, Contextual Related Posts, Related Content By PickPlugins plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including 2.0.59. This is due to missing nonce validation on a function. This makes it possible for...

PT-2025-10082

Name of the Vulnerable Software and Affected Versions Related Content By PickPlugins plugin for WordPress versions up to and including 2.0.59 Description The issue is related to Cross-Site Request Forgery due to missing nonce validation on a function, allowing unauthenticated attackers to inject...

CVE-2024-10937: Improper Access Control

The Related Posts, Inline Related Posts, Contextual Related Posts, Related Content By PickPlugins plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.0.58 via the wpajaxnoprivrelatedpostajaxgetpostids AJAX action. This makes it possible for...