Known vulnerabilities in Related Posts for WordPress

The best WordPress plugin for related posts. Simple, flexible, powerful algorithm, and built-in caching. Fully setup with only 1 click!

4Reported vulnerabilities

6.1Highest CVSS score

2.3.0Latest version

10,000+Active installs

What to do now

Update Related Posts for WordPress to 2.2.2 or later. 4 of these have a fixed version available. Updating resolves them.

Plugin last updated: May 10, 2025 / Tested up to WordPress: 6.8.8 / View on wordpress.org

Reported vulnerabilities

Ordered by how urgently they need attention — whether a vulnerability is actually being exploited, and how likely exploitation is, rather than CVSS severity alone.

CVE	Severity	Exploit probability next 30 days	Affected versions	Fixed in	Published
WF-42c38563-ed78-4e65-8d1f-b3aa6444923d	Medium 6.1	—	2.1.1 and earlier	`2.1.2`	October 3, 2022
WF-4f32d1fe-17ea-48c0-b276-36c8fcaad4a6	Medium 6.1	—	Before 1.8.2	`1.8.2`	April 20, 2015
CVE-2022-3506	Medium 5.5	1.2%	2.1.2 and earlier	`2.1.3`	October 24, 2022
CVE-2024-0592	Medium 5.4	0.3%	Before 2.2.2	`2.2.2`	March 13, 2024

Sources: vulnerability records from NVD, exploitation from CISA KEV, exploit probability from EPSS. Affected versions come from CPE ranges or from the reporting CNA.