WordPress Plugin Vulnerabilities

Related Posts for WordPress < 1.8.2 - Cross-Site Scripting (XSS)

Description

The Related Posts for WordPress WordPress plugin was affected by a Cross-Site Scripting (XSS) security vulnerability.

Affects Plugins

Plugin icon
related-posts-for-wp
Fixed in 1.8.2

References

URL
https://blog.sucuri.net/2015/04/security-advisory-xss-vulnerability-affecting-multiple-wordpress-plugins.html
URL
http://www.barrykooij.com/several-security-updates-released/

Classification

Type
XSS
OWASP top 10
A7: Cross-Site Scripting (XSS)
CWE
CWE-79
CVSS
9.6 (critical)

Miscellaneous

Submitter
ethicalhack3r
Submitter twitter
ethicalhack3r
Verified
No
WPVDB ID
f1015845-2de3-4702-91b9-4ab1785f4108

Timeline

Publicly Published
2015-04-20 (about 11 years ago)
Added
2015-04-20 (about 11 years ago)
Last Updated
2021-03-01 (about 5 years ago)

Other

Published
Title
Published
2023-03-20
Title
WordPress Amazon S3 Plugin < 1.6 - Reflected XSS
Published
2024-10-17
Title
RSS Feed Widget < 3.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via rfw-youtube-videos Shortcode
Published
2023-09-25
Title
Simple Posts Ticker < 1.1.6 - Contributor+ Stored XSS
Published
2025-09-05
Title
StoryMap <= 2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Published
2023-09-25
Title
PeproDev CF7 Database < 1.8.0 - Unauthenticated Stored XSS