Inline Related Posts (Data443) - vulnerabilities (CVEs)

4 CVEs, 0 in the last 30 days, 53 known versions, newest CVE from 2024-07-29. Vendor: Data443.

CVEs of Inline Related Posts

• CVE-2024-6487 - CVSS 5.9 (medium), 2024-07-29: The Inline Related Posts WordPress plugin before 3.8.0 does not sanitise and escape some of its settings, which could allow high privilege users such as admin…
• CVE-2024-5626 - CVSS 6.1 (medium), 2024-07-12: The Inline Related Posts WordPress plugin before 3.7.0 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected…
• CVE-2024-31426 - CVSS 4.3 (medium), 2024-04-15: Cross-Site Request Forgery (CSRF) vulnerability in Data443 Inline Related Posts.This issue affects Inline Related Posts: from n/a through 3.3.1.
• CVE-2023-6257 - CVSS 4.3 (medium), 2024-04-11: The Inline Related Posts WordPress plugin before 3.6.0 is missing authorization in an AJAX action to ensure that users are allowed to see the content of the…
• CVE-2024-2444 - CVSS 4.8 (medium), 2024-04-06: The Inline Related Posts WordPress plugin before 3.5.0 does not sanitise and escape some of its settings, which could allow high privilege users such as Admin…