CVE-2022-45374

CVE-2022-45374 (YARPP for WordPress) : Local File Inclusion due to improper path handling in YARPP

CVE-2023-0579

CVE-2023-0579 affects the YARPP (Yet Another Related Posts Plugin) for WordPress, with versions prior to 5.30.3 vulnerable. The issue is that the plugin does not validate and escape certain shortcode attributes before interpolating them into SQL statements, enabling SQL injection by any authentic...

CVE-2024-0602

The CVE-2024-0602 entry concerns the YARPP – Yet Another Related Posts Plugin for WordPress. Affected: YARPP versions up to and including 5.30.9. Root cause: insufficient input sanitization and output escaping in admin settings, enabling Stored Cross-Site Scripting. Impact: authenticated attacker...

CVE-2023-6495

CVE-2023-6495 concerns the YARPP – Yet Another Related Posts Plugin for WordPress. The vulnerability is a Stored Cross-Site Scripting (XSS) via admin settings in all versions up to and including 5.30.9, caused by insufficient input sanitization and output escaping. It affects sites using multi-si...