CVE Database /
CVE-2025-47604
CVE · Medium
CVE-2025-47604 — Inline Related Posts [intelly-related-posts] < 3.9.0
| CVE |
Vulnerability |
Type |
Severity |
Affected |
Fixed in |
Published |
Status |
|
CVE-2025-47604
|
Inline Related Posts [intelly-related-posts] < 3.9.0 |
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') |
Medium
6.5
|
< 3.9.0
|
3.9.0 |
2025-05-07 |
—
|
CVE-2025-47604
The Inline Related Posts plugin for WordPress contains a security flaw in versions 3.8.0 and earlier that allows malicious users with at least contributor privileges to embed unauthorized code snippets into the site's content, which can then be executed by visitors when they access those pages. This vulnerability arises from inadequate filtering of user-submitted data before it is displayed on the website. As a result, attackers can potentially inject and execute arbitrary scripts on affected sites.
Based on public CVE data (MITRE/NVD).
Scan your WordPress site free
No signup, no credit card — enter your URL and get a security report in seconds.
See the full security page for this plugin
Browse the CVE database
Browse all security findings