EUVD-2026-111747

The Related Posts for WordPress plugin for WordPress is vulnerable to Sensitive Information Exposure in versions up to, and including, 3.0.0 via the 'rp4wpcreatelink' parameter of the hidden 'rp4wplinkrelated' admin page. The handlecreatelink handler verifies the nonce and that the current user c...

CVE-2026-109979 Related Posts for WordPress <= 3.0.0 - Missing Authorization to Authenticated (Contributor+) Sensitive Information Exposure via 'rp4wp_create_link' Parameter

The Related Posts for WordPress plugin for WordPress is vulnerable to Sensitive Information Exposure in versions up to, and including, 3.0.0 via the 'rp4wpcreatelink' parameter of the hidden 'rp4wplinkrelated' admin page. The handlecreatelink handler verifies the nonce and that the current user c...

CVE-2026-109979

The Related Posts for WordPress plugin for WordPress, versions up to and including 3.0.0 , is vulnerable to Sensitive Information Exposure due to a missing authorization check. The handle_create_link() handler fails to verify if a user has permission to read the child post IDs provided via the rp...