Inline Related Posts (Unknown) - vulnerabilities (CVEs)

4 CVEs, 0 in the last 30 days, 2 known versions, newest CVE from 2024-07-29. Vendor: Unknown.

CVEs of Inline Related Posts

• CVE-2024-6487 - CVSS 5.9 (medium), 2024-07-29: The Inline Related Posts WordPress plugin before 3.8.0 does not sanitise and escape some of its settings, which could allow high privilege users such as admin…
• CVE-2024-5626 - CVSS 6.1 (medium), 2024-07-12: The Inline Related Posts WordPress plugin before 3.7.0 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected…
• CVE-2023-6257 - CVSS 4.3 (medium), 2024-04-11: The Inline Related Posts WordPress plugin before 3.6.0 is missing authorization in an AJAX action to ensure that users are allowed to see the content of the…
• CVE-2024-2444 - CVSS 4.8 (medium), 2024-04-06: The Inline Related Posts WordPress plugin before 3.5.0 does not sanitise and escape some of its settings, which could allow high privilege users such as Admin…