Skip to content
OpenAdvisories

Vendor

jeffparker

3 known vulnerabilities.

Products

YARPP – Yet Another Related Posts Plugin 3
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Medium 4.4
    CVE-2023-6495

    YARPP – Yet Another Related Posts Plugin <= 5.30.9 - Authenticated(Administrator+) Cross-Site Scripting

    The YARPP – Yet Another Related Posts Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to and including 5.30.9 due to insufficient input sanitization and output escaping. This makes it possible for…

    jeffparker YARPP – Yet Another Related Posts Plugin Web / CMS
  • Medium 4.4
    CVE-2024-0602

    Yet Another Related Posts Plugin (YARPP) <= 5.30.9 - Authenticated(Administrator+) Stored Cross-Site Scripting via settings

    The YARPP – Yet Another Related Posts Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 5.30.9 due to insufficient input sanitization and output escaping. This makes it possible f…

    jeffparker YARPP – Yet Another Related Posts Plugin Web / CMS
  • Medium 6.4
    CVE-2023-2433

    YARPP – Yet Another Related Posts Plugin <= 5.30.3 - Authenticated (Contributor+) Stored Cross-Site Scripting

    The YARPP plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'className' parameter in versions up to, and including, 5.30.3 due to insufficient input sanitization and output escaping. This makes it possible for contributor-level attackers t…

    jeffparker YARPP – Yet Another Related Posts Plugin Web / CMS