Cross-Site Request Forgery Vulnerability in Related Posts Lite Plugin for WordPress

CVE-2025-9618

What is CVE-2025-9618?

The Related Posts Lite plugin for WordPress contains a security flaw that allows unauthorized attackers to exploit Cross-Site Request Forgery (CSRF) vulnerabilities. This occurs due to inadequate nonce validation on the settings update functionality. Attackers can craft malicious requests, potentially allowing them to alter plugin settings if they manage to deceive site administrators into executing these requests, such as by clicking on an insecure link.

References