Inline Related Posts Security Vulnerabilities and Issues — Inline Related Posts CVE List

Lucene search

Data443Inline Related Posts

3 matches found

CVE•added 2024/04/06 5:15 a.m.•70 views

CVE-2024-2444

The Inline Related Posts WordPress plugin before 3.5.0 does not sanitise and escape some of its settings, which could allow high privilege users such as Admin to perform Cross-Site Scripting attacks even when unfiltered_html is disallowed

4.8CVSS5AI score0.0015EPSS

CVE•added 2024/04/11 5:15 a.m.•53 views

CVE-2023-6257

The Inline Related Posts WordPress plugin before 3.6.0 is missing authorization in an AJAX action to ensure that users are allowed to see the content of the posts displayed, allowing any authenticated user, such as subscriber to retrieve the content of password protected posts

4.3CVSS9.3AI score0.00201EPSS

CVE•added 2024/04/15 10:15 a.m.•43 views

CVE-2024-31426

Cross-Site Request Forgery (CSRF) vulnerability in Data443 Inline Related Posts.This issue affects Inline Related Posts: from n/a through 3.3.1.

4.3CVSS4.7AI score0.00162EPSS