CVE-2024-43919

MEDIUM NUCLEI

Yarpp Yet Another Related Posts Plugin - Missing Authorization

Title source: rule

Description

Access Control vulnerability in YARPP YARPP allows . This issue affects YARPP: from n/a through 5.30.10.

Exploits (1)

nomisec WORKING POC
by RandomRobbieBF · poc
https://github.com/RandomRobbieBF/CVE-2024-43919

Nuclei Templates (1)

YARPP <= 5.30.10 - Missing Authorization
CRITICALVERIFIEDby s4e-io
FOFA: body="wp-content/plugins/yet-another-related-posts-plugin/"

References (1)

Scores

CVSS v3 5.3
EPSS 0.8484
EPSS Percentile 99.3%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

Classification

CWE
CWE-862
Status published

Affected Products (1)

yarpp/yet_another_related_posts_plugin < 5.30.10

Timeline

Published Nov 01, 2024
Tracked Since Feb 18, 2026