Now officially on WordPress.org

CVE Database / CVE-2025-47506

CVE · Medium

CVE-2025-47506 — Contextual Related Posts [contextual-related-posts] < 4.0.3

CVE Vulnerability Type Severity Affected Fixed in Published Status
CVE-2025-47506 Contextual Related Posts [contextual-related-posts] < 4.0.3 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Medium 6.5 < 4.0.3 4.0.3 2025-05-07 —

CVE-2025-47506

The Contextual Related Posts plugin for WordPress contains a security flaw in versions 4.0.2 and earlier, allowing malicious users with contributor privileges or higher to embed unauthorized code into certain website pages. This code is then executed when the compromised page is visited by other users, posing a threat to site integrity.

Based on public CVE data (MITRE/NVD).

Scan your WordPress site free

No signup, no credit card — enter your URL and get a security report in seconds.

Run a free scan Get the plugin (free)

See the full security page for this plugin Browse the CVE database Browse all security findings