Lucene search
+L

19 matches found

NVD
NVD
•added 2026/01/05 11:17 a.m.•18 views

CVE-2025-68033

Insertion of Sensitive Information Into Sent Data vulnerability in Brecht Custom Related Posts custom-related-posts allows Retrieve Embedded Sensitive Data.This issue affects Custom Related Posts: from n/a through = 1.8.0...

7.5CVSS0.00291EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/01/05 10:39 a.m.•46 views

CVE-2025-68033 WordPress Custom Related Posts plugin <= 1.8.0 - Sensitive Data Exposure vulnerability

Insertion of Sensitive Information Into Sent Data vulnerability in Brecht Custom Related Posts custom-related-posts allows Retrieve Embedded Sensitive Data.This issue affects Custom Related Posts: from n/a through = 1.8.0...

7.5CVSS0.00291EPSS
SaveExploits0References1
CVE
CVE
•added 2026/01/05 10:39 a.m.•38 views

CVE-2025-68033

The CVE-2025-68033 entry concerns Custom Related Posts (Brecht) for WordPress, affecting versions up to 1.8.0. It is an Unauthenticated Information Exposure vulnerability described as Insertion of Sensitive Information Into Sent Data, enabling retrieval of embedded sensitive data. Wordfence detai...

7.5CVSS5.8AI score0.00291EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/01/05 10:39 a.m.•7 views

CVE-2025-68033 WordPress Custom Related Posts plugin <= 1.8.0 - Sensitive Data Exposure vulnerability

Insertion of Sensitive Information Into Sent Data vulnerability in Brecht Custom Related Posts allows Retrieve Embedded Sensitive Data.This issue affects Custom Related Posts: from n/a through 1.8.0...

7.5CVSS5.8AI score0.00291EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2026/01/05 12:00 a.m.•23 views

WordPress plugin Custom Related Posts 安全漏洞

...

7.5CVSS6.8AI score0.00291EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/01/05 12:00 a.m.•1 views

CVE-2025-68033: Insertion of Sensitive Information Into Sent Data

Insertion of Sensitive Information Into Sent Data vulnerability in Brecht Custom Related Posts custom-related-posts allows Retrieve Embedded Sensitive Data.This issue affects Custom Related Posts: from n/a through = 1.8.0...

7.5CVSS5.8AI score0.00291EPSS
SaveExploits0References1
Patchstack
Patchstack
•added 2025/12/25 9:05 a.m.•16 views

WordPress Custom Related Posts plugin <= 1.8.0 - Sensitive Data Exposure vulnerability

Sensitive Data Exposure vulnerability discovered by MD ISMAIL in WordPress Plugin Custom Related Posts versions = 1.8.0...

7.5CVSS6.9AI score0.00291EPSS
SaveExploits0Affected Software1
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•10 views

EUVD-2025-12323

Malicious code in bioql PyPI...

6.5CVSS7.2AI score0.00216EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
•added 2025/05/23 7:11 a.m.•22 views

CVE-2024-12825

The Custom Related Posts plugin for WordPress is vulnerable to unauthorized access & modification of data due to a missing capability check on three AJAX actions in all versions up to, and including, 1.7.3. This makes it possible for authenticated attackers, with Subscriber-level access and above...

5.4CVSS6.5AI score0.00264EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/04/25 11:33 p.m.•21 views

CVE-2025-46227

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Brecht Custom Related Posts custom-related-posts allows Stored XSS.This issue affects Custom Related Posts: from n/a through = 1.7.4...

6.5CVSS7.2AI score0.00216EPSS
SaveExploits0References1
NVD
NVD
•added 2025/04/22 10:15 a.m.•51 views

CVE-2025-46227

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Brecht Custom Related Posts custom-related-posts allows Stored XSS.This issue affects Custom Related Posts: from n/a through = 1.7.4...

6.5CVSS0.00216EPSS
SaveExploits0References1
CVE
CVE
•added 2025/04/22 9:53 a.m.•66 views

CVE-2025-46227

CVE-2025-46227 is a Cross-Site Scripting (XSS) vulnerability in the Brecht Custom Related Posts WordPress plugin. The issue is an improper neutralization of input during web page generation, enabling stored XSS. Affected versions are up to and including 1.7.4 (n/a through 1.7.4). The vulnerabilit...

6.5CVSS7.2AI score0.00216EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2025/04/22 9:53 a.m.•49 views

CVE-2025-46227 WordPress Custom Related Posts plugin <= 1.7.4 - Cross Site Scripting (XSS) Vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Brecht Custom Related Posts custom-related-posts allows Stored XSS.This issue affects Custom Related Posts: from n/a through = 1.7.4...

6.5CVSS0.00216EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/04/22 12:00 a.m.•2 views

CVE-2025-46227: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Brecht Custom Related Posts custom-related-posts allows Stored XSS.This issue affects Custom Related Posts: from n/a through = 1.7.4...

6.5CVSS5.8AI score0.00216EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/04/22 12:00 a.m.•13 views

PT-2025-17494 · Unknown · Brecht Custom Related Posts

Name of the Vulnerable Software and Affected Versions: Brecht Custom Related Posts versions n/a through 1.7.4 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Stored XSS. This means that an attacker...

6.5CVSS6.8AI score0.00216EPSS
SaveExploits0References6
OSV
OSV
•added 2025/02/01 8:15 a.m.•17 views

CVE-2024-12825

The Custom Related Posts plugin for WordPress is vulnerable to unauthorized access & modification of data due to a missing capability check on three AJAX actions in all versions up to, and including, 1.7.3. This makes it possible for authenticated attackers, with Subscriber-level access and above...

5.4CVSS5.8AI score0.00264EPSS
SaveExploits0References2
NVD
NVD
•added 2025/02/01 8:15 a.m.•36 views

CVE-2024-12825

The Custom Related Posts plugin for WordPress is vulnerable to unauthorized access & modification of data due to a missing capability check on three AJAX actions in all versions up to, and including, 1.7.3. This makes it possible for authenticated attackers, with Subscriber-level access and above...

5.4CVSS0.00264EPSS
SaveExploits0References2
Patchstack
Patchstack
•added 2025/02/01 12:07 a.m.•18 views

WordPress Custom Related Posts plugin <= 1.7.3 - Missing Authorization to Authenticated (Subscriber+) Private Post Search and Relation Updates vulnerability

Missing Authorization to Authenticated Subscriber+ Private Post Search and Relation Updates vulnerability discovered by Lucio Sá in WordPress Plugin Custom Related Posts versions = 1.7.3...

5.4CVSS7AI score0.00264EPSS
SaveExploits0References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/02/01 12:00 a.m.•4 views

CVE-2024-12825: Missing Authorization

The Custom Related Posts plugin for WordPress is vulnerable to unauthorized access & modification of data due to a missing capability check on three AJAX actions in all versions up to, and including, 1.7.3. This makes it possible for authenticated attackers, with Subscriber-level access and above...

5.4CVSS5.6AI score0.00264EPSS
SaveExploits0References1
Rows per page
Query Builder