Related Posts Lite WordPress Plugin Cross-Site Request Forgery Vulnerability
Vulnerability
A Cross-Site Request Forgery (CSRF) vulnerability exists in the Related Posts Lite plugin for WordPress, affecting all versions through 1.12. The issue arises from inadequate nonce validation in the settings update process, allowing unauthenticated attackers to alter plugin settings by deceiving a site administrator into clicking a link.
Impact
Exploitation of this vulnerability could lead to unauthorized changes in the plugin's settings, potentially disrupting the site's functionality or user experience.
Added: Aug 30, 2025, 2:32 AM
Updated: Aug 30, 2025, 2:32 AM
Vulnerability Rating
Custom Algorithm
spread
0.0impact
0.6exploitability
7.0remediation
0.0relevance
0.4threat
3.2urgency
2.9incentive
1.7Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.