Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Vendor: barrykooij Clear all filters
TI-2026-81744 CVE-2026-109980 · GHSA-jcpv-fxpw-qc4w

Related Posts for WordPress exposes private post titles

Priority LOW 19

The Related Posts for WordPress plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 3.0.0 via the 'rp4wp_view' parameter.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00218 Published 2026-10-28 No fix listed CWE-862
TI-2026-81743 CVE-2026-109979 · GHSA-88jc-p652-m75v

Related Posts for WordPress exposes titles of non-public posts

Priority LOW 20

The Related Posts for WordPress plugin for WordPress is vulnerable to Sensitive Information Exposure in versions up to, and including, 3.0.0 via the 'rp4wp_create_link' parameter of the hidden 'rp4wp_link_related' admin…

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00298 Published 2026-10-28 No fix listed CWE-862
TI-2025-32791 CVE-2025-52741 · GHSA-p7m2-8f2q-g63m

WordPress Post Connector Plugin <= 1.0.11 - Cross Site Scripting (XSS) Vulnerability

Priority LOW 33

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Barry Kooij Post Connector post-connector allows Reflected XSS.This issue affects Post Connector: from n/a through <=…

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.0025 Published 2025-10-22 No fix listed CWE-79