Vulnerabilities > Yarpp > YET Another Related Posts Plugin > 5.30.4
DATE | CVE | VULNERABILITY TITLE | RISK |
---|---|---|---|
2024-06-19 | CVE-2023-6495 | Cross-site Scripting vulnerability in Yarpp YET Another Related Posts Plugin The YARPP – Yet Another Related Posts Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to and including 5.30.9 due to insufficient input sanitization and output escaping. | 4.8 |
2024-05-17 | CVE-2022-45374 | Unspecified vulnerability in Yarpp YET Another Related Posts Plugin Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in YARPP allows PHP Local File Inclusion.This issue affects YARPP: from n/a through 5.30.4. | 6.5 |
2024-02-29 | CVE-2024-0602 | Cross-site Scripting vulnerability in Yarpp YET Another Related Posts Plugin The YARPP – Yet Another Related Posts Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 5.30.9 due to insufficient input sanitization and output escaping. | 4.0 |