CVE-2022-45374

CVE-2022-45374 (YARPP for WordPress) : Local File Inclusion due to improper path handling in YARPP

CVE-2024-43919

CVE-2024-43919 affects the YARPP plugin for WordPress up to version 5.30.10, with a missing authorization capability check allowing unauthenticated modification of display types (broken access control). The Nuclei template corroborates a Missing Authorization flaw in YARPP

CVE-2022-4471

CVE-2022-4471 affects the WordPress plugin YARPP (Yet Another Related Posts Plugin) prior to version 5.30.3 . The vulnerability arises because certain shortcode attributes are not validated/escaped before being output in a page/post, which could allow a user with the contributor role or higher to...

CVE-2023-0579

CVE-2023-0579 affects the YARPP (Yet Another Related Posts Plugin) for WordPress, with versions prior to 5.30.3 vulnerable. The issue is that the plugin does not validate and escape certain shortcode attributes before interpolating them into SQL statements, enabling SQL injection by any authentic...

CVE-2023-2433

The CVE-2023-2433 entry concerns the WordPress YARPP (Yet Another Related Posts Plugin) vulnerable to Stored Cross-Site Scripting via the className parameter. Affected: YARPP versions up to and including 5.30.3. Root cause: insufficient input sanitization and output escaping in YARPP_Core.php, en...

CVE-2024-0602

The CVE-2024-0602 entry concerns the YARPP – Yet Another Related Posts Plugin for WordPress. Affected: YARPP versions up to and including 5.30.9. Root cause: insufficient input sanitization and output escaping in admin settings, enabling Stored Cross-Site Scripting. Impact: authenticated attacker...

CVE-2023-6495

CVE-2023-6495 concerns the YARPP – Yet Another Related Posts Plugin for WordPress. The vulnerability is a Stored Cross-Site Scripting (XSS) via admin settings in all versions up to and including 5.30.9, caused by insufficient input sanitization and output escaping. It affects sites using multi-si...