Skip to content
OpenAdvisories
High · 7.5 CVE-2025-68033 EUVD-2026-0866GHSA-qppc-993h-86qq

WordPress Custom Related Posts plugin <= 1.8.0 - Sensitive Data Exposure vulnerability

Published Jan 5, 2026 · Updated Apr 28, 2026 · Assigned by Patchstack

Description

Insertion of Sensitive Information Into Sent Data vulnerability in Brecht Custom Related Posts custom-related-posts allows Retrieve Embedded Sensitive Data.This issue affects Custom Related Posts: from n/a through <= 1.8.0.

Affected products

VendorProductAffectedFixed
Brecht Custom Related Posts ≤ 1.8.0 —

References