CVE-2024-43919

The YARPP – Yet Another Related Posts Plugin for WordPress contains a security flaw in versions up to and including 5.30.10 that allows unauthenticated users to modify display types because the ~/includes/yarpp_pro_set_display_types.php file fails to verify user permissions. An attacker without any authentication credentials can exploit this missing capability check to alter plugin settings. The vulnerability was remedied in version 5.30.11.

Based on public CVE data (MITRE/NVD).