Vulnerabilities

TI-2014-03209 CVE-2014-3937 · GHSA-p3gm-9c8c-mjwh

SQL injection vulnerability in the Contextual Related Posts plugin before 1.8.10.2 for…

LOW 37

SQL injection vulnerability in the Contextual Related Posts plugin before 1.8.10.2 for WordPress allows remote attackers to execute arbitrary SQL commands via unspecified vectors.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.02031 Published 2014-06-02 No fix listed CWE-89

TI-2013-02371 CVE-2013-2710 · GHSA-58gh-w9m3-2whq

Cross-site request forgery (CSRF) vulnerability in the Contextual Related Posts plugin…

LOW 32

Cross-site request forgery (CSRF) vulnerability in the Contextual Related Posts plugin before 1.8.7 for WordPress allows remote attackers to hijack the authentication of administrators for requests that conduct cross-sit…

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.01052 Published 2014-06-02 No fix listed CWE-352

Vulnerabilities

Filters

SQL injection vulnerability in the Contextual Related Posts plugin before 1.8.10.2 for…

Cross-site request forgery (CSRF) vulnerability in the Contextual Related Posts plugin…