WordPress Plugin Vulnerabilities

Contextual Related Posts < 1.8.7 - Cross-Site Request Forgery

Description

The Contextual Related Posts WordPress plugin was affected by a Cross-Site Request Forgery security vulnerability, which could lead to Cross-Site Scripting issues.

Affects Plugins

Plugin icon
contextual-related-posts
Fixed in 1.8.7

References

CVE
CVE-2013-2710

Classification

Type
CSRF
OWASP top 10
A2: Broken Authentication and Session Management
CWE
CWE-352
CVSS
6.4 (medium)

Miscellaneous

Verified
No
WPVDB ID
7d1d1e6b-baa7-4323-a491-00a376def68c

Timeline

Publicly Published
2014-08-01 (about 11 years ago)
Added
2014-08-01 (about 11 years ago)
Last Updated
2020-11-19 (about 5 years ago)

Other

Published
Title
Published
2023-11-28
Title
Product Size Chart For WooCommerce < 1.1.6 - Settings Update via CSRF
Published
2025-02-14
Title
DirectoryPress Frontend < 2.8.0 - Cross-Site Request Forgery to Listing Status Update
Published
2024-09-10
Title
EKC Tournament Manager < 2.2.2 - Delete Tournaments via CSRF
Published
2022-12-22
Title
Asgaros Forum <= 2.2.0 - Cross-Site Request Forgery
Published
2021-06-30
Title
KONTXT Improves WordPress Search <= 1.4.6 - CSRF Bypass