Cross-site request forgery (CSRF) vulnerability in the Contextual Related Posts plugin before 1.8.7 for WordPress allows remote attackers to hijack the authentication of administrators for requests that conduct cross-site scripting (XSS) attacks via unspecified vectors.
The web application does not, or can not, sufficiently verify whether a well-formed, valid, consistent request was intentionally provided by the user who submitted the request.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Contextual_related_posts | Ajaydsouza | * | 1.8.6 (including) |
| Contextual_related_posts | Ajaydsouza | 1.0 (including) | 1.0 (including) |
| Contextual_related_posts | Ajaydsouza | 1.1 (including) | 1.1 (including) |
| Contextual_related_posts | Ajaydsouza | 1.1.1 (including) | 1.1.1 (including) |
| Contextual_related_posts | Ajaydsouza | 1.2 (including) | 1.2 (including) |
| Contextual_related_posts | Ajaydsouza | 1.2.1 (including) | 1.2.1 (including) |
| Contextual_related_posts | Ajaydsouza | 1.2.2 (including) | 1.2.2 (including) |
| Contextual_related_posts | Ajaydsouza | 1.3 (including) | 1.3 (including) |
| Contextual_related_posts | Ajaydsouza | 1.3.1 (including) | 1.3.1 (including) |
| Contextual_related_posts | Ajaydsouza | 1.4 (including) | 1.4 (including) |
| Contextual_related_posts | Ajaydsouza | 1.4.1 (including) | 1.4.1 (including) |
| Contextual_related_posts | Ajaydsouza | 1.4.2 (including) | 1.4.2 (including) |
| Contextual_related_posts | Ajaydsouza | 1.5 (including) | 1.5 (including) |
| Contextual_related_posts | Ajaydsouza | 1.5.1 (including) | 1.5.1 (including) |
| Contextual_related_posts | Ajaydsouza | 1.5.2 (including) | 1.5.2 (including) |
| Contextual_related_posts | Ajaydsouza | 1.6 (including) | 1.6 (including) |
| Contextual_related_posts | Ajaydsouza | 1.6.1 (including) | 1.6.1 (including) |
| Contextual_related_posts | Ajaydsouza | 1.6.2 (including) | 1.6.2 (including) |
| Contextual_related_posts | Ajaydsouza | 1.6.3 (including) | 1.6.3 (including) |
| Contextual_related_posts | Ajaydsouza | 1.6.4 (including) | 1.6.4 (including) |
| Contextual_related_posts | Ajaydsouza | 1.6.5 (including) | 1.6.5 (including) |
| Contextual_related_posts | Ajaydsouza | 1.7 (including) | 1.7 (including) |
| Contextual_related_posts | Ajaydsouza | 1.7.1 (including) | 1.7.1 (including) |
| Contextual_related_posts | Ajaydsouza | 1.7.2 (including) | 1.7.2 (including) |
| Contextual_related_posts | Ajaydsouza | 1.7.3 (including) | 1.7.3 (including) |
| Contextual_related_posts | Ajaydsouza | 1.8 (including) | 1.8 (including) |
| Contextual_related_posts | Ajaydsouza | 1.8.1 (including) | 1.8.1 (including) |
| Contextual_related_posts | Ajaydsouza | 1.8.2 (including) | 1.8.2 (including) |
| Contextual_related_posts | Ajaydsouza | 1.8.3 (including) | 1.8.3 (including) |
| Contextual_related_posts | Ajaydsouza | 1.8.4 (including) | 1.8.4 (including) |
| Contextual_related_posts | Ajaydsouza | 1.8.5 (including) | 1.8.5 (including) |