barrykooij Vulnerabilities and Affected Products
Explore source-attributed vulnerabilities associated with barrykooij products.
Products
- barrykooij/related-posts-for-wp1 vulnerability
- Related Posts for WordPress1 vulnerability
| Vulnerability | Title and context | CVSS | EPSS | PoCs | Signals | STIX action |
|---|---|---|---|---|---|---|
CVE-2024-0592MEDIUM | Related Posts for WordPress <= 2.2.1 - Cross-Site Request ForgeryThe Related Posts for WordPress plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.2.1. This is due to missing or incorrect nonce validation on the handle_create_link() function. This makes it possible for unauthenticated attackers to add related posts to other posts via a forged request granted they can trick a site administrator into performing an action such as clicking on a link. This ultimately makes it possible for attackers to view dra… CWE-352Mar 13, 2024 | CVSS5.4v3.1 | EPSS0.285% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2022-3506MEDIUM | Cross-site Scripting (XSS) - Stored in barrykooij/related-posts-for-wpCross-site Scripting (XSS) - Stored in GitHub repository barrykooij/related-posts-for-wp prior to 2.1.3. | CVSS5.4v3.1 | EPSS1.15% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware use1 Nuclei template | STIX |