Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

2 records

Vendor: brechtvds Component: Custom Related Posts Clear all filters
TI-2025-28979 CVE-2025-46227 · GHSA-884c-w8q7-3ppv

WordPress Custom Related Posts plugin <= 1.7.4 - Cross Site Scripting (XSS) Vulnerability

Priority LOW 28

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Brecht Custom Related Posts custom-related-posts allows Stored XSS.This issue affects Custom Related Posts: from n/a t…

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.0022 Published 2025-04-22 No fix listed CWE-79
TI-2024-11885 CVE-2024-12825 · GHSA-wc2w-j7m2-p46m

Missing authorization in brechtvds Custom Related Posts

Priority LOW 24

The Custom Related Posts plugin for WordPress is vulnerable to unauthorized access & modification of data due to a missing capability check on three AJAX actions in all versions up to, and including, 1.7.3.

CVSS 3.1MEDIUM 5.4 Network Low privileges No interaction EPSS 0.00271 Published 2025-02-01 No fix listed CWE-862