CVE-2024-32549: Cross-Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in Microkid Related Posts for WordPress allows Cross-Site Scripting XSS.This issue affects Related Posts for WordPress: from n/a through 4.0.3...

CVE-2024-0592: Cross-Site Request Forgery (CSRF)

The Related Posts for WordPress plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.2.1. This is due to missing or incorrect nonce validation on the handlecreatelink function. This makes it possible for unauthenticated attackers to add related...

CVE-2021-24482: Improper Neutralization of Input During Web Page Generation

The Related Posts for WordPress plugin through 2.0.4 does not sanitise its headingtext and CSS settings, allowing high privilege users admin to set XSS payloads in them, leading to Stored Cross-Site Scripting issues...

PT-2021-15726

Name of the Vulnerable Software and Affected Versions: Related Posts for WordPress versions prior to 2.0.4 Description: The issue arises from unvalidated input and a lack of output encoding within the plugin, leading to a Reflected Cross-Site Scripting XSS vulnerability. This vulnerability is...

CVE-2021-24180: Improper Neutralization of Input During Web Page Generation

Unvalidated input and lack of output encoding within the Related Posts for WordPress plugin before 2.0.4 lead to a Reflected Cross-Site Scripting XSS vulnerability within the 'lang' GET parameter while editing a post, triggered when users with the capability of editing posts access a malicious UR...