Cross-Site Request Forgery in Related Posts with Thumbnails Plugin by WordPress
CVE-2025-31569

7.1HIGH

Key Information:

Vendor

WordPress
Status
WordPress Related Posts With Thumbnails
Vendor
CVE Published:
31 March 2025

What is CVE-2025-31569?

A Cross-Site Request Forgery (CSRF) vulnerability exists in the Related Posts with Thumbnails plugin for WordPress, allowing an attacker to potentially execute unauthorized actions on behalf of users. This vulnerability also facilitates Stored Cross-Site Scripting (XSS), which can lead to the execution of malicious scripts in the context of the user's browser. The affected versions range from n/a to 3.0.0.1, posing a risk to users who operate these installations without appropriate security measures.

Affected Version(s)

wordpress related Posts with thumbnails <= 3.0.0.1

References

https://patchstack.com/database/wordpress/plugin/related-...
vdb-entry

CVSS V3.1

Score:
7.1
Severity:
HIGH
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Abdi Pranata (Patchstack Alliance)
.
The Cyber Security Vulnerability Database.