Cross-Site Request Forgery (CSRF) and Cross-Site Scripting (XSS) Vulnerability in Related Posts for WordPress

CVE-2024-32549

Summary

A critical Cross-Site Request Forgery (CSRF) vulnerability has been identified within the Microkid Related Posts plugin for WordPress, specifically impacting versions from n/a through 4.0.3. This vulnerability poses a significant risk as it allows attackers to exploit unsuspecting users, potentially leading to unauthorized actions on their behalf. The resulting Cross-Site Scripting (XSS) can compromise the integrity of the application, allowing attackers to inject malicious scripts into web pages viewed by users. Website administrators are urged to apply necessary patches and updates to mitigate potential risks associated with this vulnerability.

References