TI-2022-03236 CVE-2022-3506 · GHSA-j5xh-7x7x-vvpj
Cross-site Scripting (XSS) - Stored in barrykooij/related-posts-for-wp
Priority MEDIUM 58
Cross-site Scripting (XSS) - Stored in GitHub repository barrykooij/related-posts-for-wp prior to 2.1.3.
Never5
Records8All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9
Exploited now
Never5 records in CISA KEVNo Never5 vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
8 records
TI-2015-07739 CVE-2015-9362 · GHSA-9hvp-8c63-f499
The Post Connector plugin before 1.0.4 for WordPress has XSS via add_query_arg() and remove_query_arg().
Priority LOW 29
The Post Connector plugin before 1.0.4 for WordPress has XSS via add_query_arg() and remove_query_arg().
TI-2015-07738 CVE-2015-9361 · GHSA-vh45-4hjc-29v7
The Related Posts plugin before 1.8.2 for WordPress has XSS via add_query_arg() and remove_query_arg().
Priority LOW 29
The Related Posts plugin before 1.8.2 for WordPress has XSS via add_query_arg() and remove_query_arg().
TI-2015-07673 CVE-2015-9296 · GHSA-5f85-34pv-852x
The download-monitor plugin before 1.7.1 for WordPress has XSS related to add_query_arg.
Priority LOW 29
The download-monitor plugin before 1.7.1 for WordPress has XSS related to add_query_arg.
TI-2023-13408 CVE-2023-28931 · GHSA-wcc5-qj8j-6xc5
WordPress Post Connector Plugin <= 1.0.9 is vulnerable to Cross Site Scripting (XSS)
Priority LOW 27
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Never5 Post Connector plugin <= 1.0.9 versions.
TI-2021-06472 CVE-2021-24180 · GHSA-6wjh-h2vc-4wfg
Related Posts for WordPress < 2.0.4 - Authenticated Reflected Cross-Site Scripting (XSS)
Priority LOW 25
Unvalidated input and lack of output encoding within the Related Posts for WordPress plugin before 2.0.4 lead to a Reflected Cross-Site Scripting (XSS) vulnerability within the 'lang' GET parameter while editing a post,…
TI-2024-00548 CVE-2024-0592 · GHSA-hh53-w78f-76fc
Related Posts for WordPress <= 2.2.1 - Cross-Site Request Forgery
Priority LOW 24
The Related Posts for WordPress plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.2.1.
TI-2021-06769 CVE-2021-24482 · GHSA-fcp3-3hf6-755h
Related Posts for WordPress <= 2.0.4 - Authenticated Stored XSS & XFS
Priority LOW 23
The Related Posts for WordPress plugin through 2.0.4 does not sanitise its heading_text and CSS settings, allowing high privilege users (admin) to set XSS payloads in them, leading to Stored Cross-Site Scripting issues.