Related Posts Security Vulnerabilities and Issues — Related Posts CVE List

Lucene search

Never5Related Posts

5 matches found

CVE•added 2022/10/14 2:15 p.m.•89 views

CVE-2022-3506

Cross-site Scripting (XSS) - Stored in GitHub repository barrykooij/related-posts-for-wp prior to 2.1.3.

5.5CVSS5.3AI score0.05798EPSS

CVE•added 2024/03/13 4:15 p.m.•46 views

CVE-2024-0592

The Related Posts for WordPress plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.2.1. This is due to missing or incorrect nonce validation on the handle_create_link() function. This makes it possible for unauthenticated attackers to add relate...

5.4CVSS6.1AI score0.00135EPSS

CVE•added 2021/07/19 11:15 a.m.•40 views

CVE-2021-24482

The Related Posts for WordPress plugin through 2.0.4 does not sanitise its heading_text and CSS settings, allowing high privilege users (admin) to set XSS payloads in them, leading to Stored Cross-Site Scripting issues.

4.8CVSS4.8AI score0.00206EPSS

CVE•added 2019/08/28 12:15 p.m.•39 views

CVE-2015-9361

The Related Posts plugin before 1.8.2 for WordPress has XSS via add_query_arg() and remove_query_arg().

6.1CVSS6AI score0.0019EPSS

CVE•added 2021/04/05 7:15 p.m.•32 views

CVE-2021-24180

Unvalidated input and lack of output encoding within the Related Posts for WordPress plugin before 2.0.4 lead to a Reflected Cross-Site Scripting (XSS) vulnerability within the 'lang' GET parameter while editing a post, triggered when users with the capability of editing posts access a malicious UR...

5.4CVSS5.3AI score0.00162EPSS