CVE-2022-3506: never5 related posts – CVSS 5.4 · Watchpost

← All vulnerabilities

CVE-2022-3506

MEDIUM 5.4CVE-2022-3506 · Published 14/10/2022 · updated 17/06/2026

In short

CVE-2022-3506 is a MEDIUM (CVSS 5.4) vulnerability affecting related posts (never5).
Chance of exploitation in the next 30 days (EPSS): 1.6%, higher than 76.2% of all vulnerabilities.
Fix: update to 2.1.3 or later.

Package	Affected versions	Patched versions
related posts never5	`< 2.1.3`	`2.1.3`

Description

Cross-site Scripting (XSS) - Stored in GitHub repository barrykooij/related-posts-for-wp prior to 2.1.3.

References

More vulnerabilities in related posts

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free