yet another related posts plugin vulnerabilities and fixes

Recent CVEs affecting yet another related posts plugin, with upgrade or downgrade steps. 3 tracked.

Also searched as: yetanotherrelatedpostsplugin.

yet another related posts plugin has 3 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 3. Most recent: 2024-11-01. Highest priority: CVE-2024-43919 (score 48/100).

• CVE-2024-43919 MEDIUM 5.3 UPGRADE Access Control vulnerability in YARPP YARPP allows . This issue affects YARPP: from n/a through 5.30.10.
• CVE-2023-6495 MEDIUM 4.4 UPGRADE The YARPP – Yet Another Related Posts Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting
• CVE-2022-45374 HIGH 7.7 UPGRADE Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in YARPP allows P

FAQ

How do I fix yet another related posts plugin vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is yet another related posts plugin being exploited right now?

None of the tracked yet another related posts plugin CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which yet another related posts plugin CVE should I patch first?

CVE-2024-43919 currently ranks highest (48/100): Access Control vulnerability in YARPP YARPP allows . This issue affects YARPP: from n/a through 5.30.10..

RSS feed for yet another related posts plugin · ← Back to latest CVEs