Cross-Site Request Forgery in Related Posts Plugins for WordPress

CVE-2024-12634

What is CVE-2024-12634?

The Related Posts, Inline Related Posts, Contextual Related Posts, and Related Content By PickPlugins plugins for WordPress are affected by a Cross-Site Request Forgery vulnerability stemming from inadequate nonce validation. This oversight allows potential attackers to exploit the vulnerability by crafting malicious requests that can trick an administrator into executing unsafe actions, such as clicking a compromised link, thereby injecting harmful scripts without proper authentication.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References