Vulnerabilities

TI-2026-00693 CVE-2026-0916 · GHSA-rmqp-hhcc-3f7m

Cross-site scripting in keesiemeijer Related Posts by Taxonomy

LOW 28

The Related Posts by Taxonomy plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'related_posts_by_tax' shortcode in all versions up to, and including, 2.7.6 due to insufficient input sani…

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.00252 Published 2026-01-16 No fix listed CWE-79

TI-2025-01299 CVE-2025-1510 · GHSA-2rqx-pq8v-wx7j

Custom Post Type Date Archives <= 2.7.1 - Missing Authorization to Unauthenticated Arbitrary Shortcode Execution

MEDIUM 49

The The Custom Post Type Date Archives plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 2.7.1.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00637 Published 2025-02-22 No fix listed CWE-94

Vulnerabilities

Filters

Cross-site scripting in keesiemeijer Related Posts by Taxonomy

Custom Post Type Date Archives <= 2.7.1 - Missing Authorization to Unauthenticated Arbitrary Shortcode Execution