CVE-2025-11926

CVE-2025-11926 Wordpress-Related-Posts-Lite-plugin-XSS-PoC for PoC: https://github.com/prabhatverma47/Wordpress-Related-Posts-Lite-plugin-XSS-PoC...

CVE-2026-109980

The Related Posts for WordPress plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 3.0.0 via the 'rp4wpview' parameter. This makes it possible for authenticated attackers, with contributor-level access and above, to extract the titles and...

CVE-2026-109979

The Related Posts for WordPress plugin for WordPress is vulnerable to Sensitive Information Exposure in versions up to, and including, 3.0.0 via the 'rp4wpcreatelink' parameter of the hidden 'rp4wplinkrelated' admin page. The handlecreatelink handler verifies the nonce and that the current user c...

CVE-2026-109980 Related Posts for WordPress <= 3.0.0 - Missing Authorization to Authenticated (Contributor+) Sensitive Information Exposure via 'rp4wp_view' Parameter

The Related Posts for WordPress plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 3.0.0 via the 'rp4wpview' parameter. This makes it possible for authenticated attackers, with contributor-level access and above, to extract the titles and...

CVE-2026-109980 Related Posts for WordPress <= 3.0.0 - Missing Authorization to Authenticated (Contributor+) Sensitive Information Exposure via 'rp4wp_view' Parameter

The Related Posts for WordPress plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 3.0.0 via the 'rp4wpview' parameter. This makes it possible for authenticated attackers, with contributor-level access and above, to extract the titles and...

CVE-2026-109980

The Related Posts for WordPress plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to and including 3.0.0 . The vulnerability exists in the 'rp4wp_view' parameter due to missing authorization checks. Authenticated attackers with Contributor-level access or hig...

EUVD-2026-111754

The Related Posts for WordPress plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 3.0.0 via the 'rp4wpview' parameter. This makes it possible for authenticated attackers, with contributor-level access and above, to extract the titles and...

CVE-2026-109979 Related Posts for WordPress <= 3.0.0 - Missing Authorization to Authenticated (Contributor+) Sensitive Information Exposure via 'rp4wp_create_link' Parameter

The Related Posts for WordPress plugin for WordPress is vulnerable to Sensitive Information Exposure in versions up to, and including, 3.0.0 via the 'rp4wpcreatelink' parameter of the hidden 'rp4wplinkrelated' admin page. The handlecreatelink handler verifies the nonce and that the current user c...

CVE-2026-109979 Related Posts for WordPress <= 3.0.0 - Missing Authorization to Authenticated (Contributor+) Sensitive Information Exposure via 'rp4wp_create_link' Parameter

The Related Posts for WordPress plugin for WordPress is vulnerable to Sensitive Information Exposure in versions up to, and including, 3.0.0 via the 'rp4wpcreatelink' parameter of the hidden 'rp4wplinkrelated' admin page. The handlecreatelink handler verifies the nonce and that the current user c...

EUVD-2026-111747

The Related Posts for WordPress plugin for WordPress is vulnerable to Sensitive Information Exposure in versions up to, and including, 3.0.0 via the 'rp4wpcreatelink' parameter of the hidden 'rp4wplinkrelated' admin page. The handlecreatelink handler verifies the nonce and that the current user c...

CVE-2026-109979

The Related Posts for WordPress plugin for WordPress, versions up to and including 3.0.0 , is vulnerable to Sensitive Information Exposure due to a missing authorization check. The handle_create_link() handler fails to verify if a user has permission to read the child post IDs provided via the rp...

CVE-2026-109980: barrykooij Related Posts for WordPress: The Related Posts for WordPress plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up…

The Related Posts for WordPress plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 3.0.0 via the 'rp4wpview' parameter. This makes it possible for authenticated attackers, with contributor-level access and above, to extract the titles and...

WordPress Related Posts for WordPress authorization issue vulnerability

WordPress Related Posts for WordPress 3.0.0 and earlier versions contain an authorization issue vulnerability. This vulnerability stems from improper access control via the rp4wpview parameter; authorization checks only verify whether an attacker possesses editposts and editpost permissions on...

PT-2026-127869

The Related Posts for WordPress plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 3.0.0 via the 'rp4wp view' parameter. This makes it possible for authenticated attackers, with contributor-level access and above, to extract the titles and...

WordPress Related Posts for WordPress authorization issue vulnerability

WordPress Related Posts for WordPress 3.0.0 and earlier versions contain an authorization issue vulnerability. This vulnerability arises because the rp4wpcreatelink parameter in the hidden admin page rp4wplinkrelated fails to validate the sub-post ID, thereby bypassing permission checks. As a...

CVE-2026-109979: barrykooij Related Posts for WordPress: The Related Posts for WordPress plugin for WordPress is vulnerable to Sensitive Information Exposure in versions up to,…

The Related Posts for WordPress plugin for WordPress is vulnerable to Sensitive Information Exposure in versions up to, and including, 3.0.0 via the 'rp4wpcreatelink' parameter of the hidden 'rp4wplinkrelated' admin page. The handlecreatelink handler verifies the nonce and that the current user c...

PT-2026-127868

The Related Posts for WordPress plugin for WordPress is vulnerable to Sensitive Information Exposure in versions up to, and including, 3.0.0 via the 'rp4wp create link' parameter of the hidden 'rp4wp link related' admin page. The handle create link handler verifies the nonce and that the current...

WordPress Related Posts for WordPress plugin <= 3.0.0 - Missing Authorization to Authenticated (Contributor+) Sensitive Information Exposure vulnerability

Missing Authorization to Authenticated Contributor+ Sensitive Information Exposure vulnerability discovered by Wordfence PRISM in WordPress Plugin Related Posts for WordPress versions = 3.0.0...

WordPress Related Posts for WordPress plugin <= 3.0.0 - Missing Authorization to Authenticated (Contributor+) Sensitive Information Exposure vulnerability

Missing Authorization to Authenticated Contributor+ Sensitive Information Exposure vulnerability discovered by Wordfence PRISM in WordPress Plugin Related Posts for WordPress versions = 3.0.0...

CVE-2026-85653

The Contextual Related Posts plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'otherattributes' Block Parameter in all versions up to, and including, 4.4.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with...