What’s Vulnerable › Vulnerabilities

CVE-2011-0760

• Severity: medium (CVSS 4.3 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.0% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2011-03-28 · updated 2026-06-16
• Weakness: CWE-352

Description

Multiple cross-site request forgery (CSRF) vulnerabilities in the configuration screen in wp-relatedposts.php in the WP Related Posts plugin 1.0 for WordPress allow remote attackers to hijack the authentication of administrators for requests that insert cross-site scripting (XSS) sequences via the (1) wp_relatedposts_title, (2) wp_relatedposts_num, or (3) wp_relatedposts_type parameter.

Affected products

• Adminofsystem Wp Related Posts: 1.0

References

• http://archives.neohapsis.com/archives/fulldisclosure/2011-03/0205.html
• http://secunia.com/advisories/43777
• http://www.securityfocus.com/bid/46908
• https://exchange.xforce.ibmcloud.com/vulnerabilities/66166
• https://exchange.xforce.ibmcloud.com/vulnerabilities/66168
• http://archives.neohapsis.com/archives/fulldisclosure/2011-03/0205.html
• http://secunia.com/advisories/43777
• http://www.securityfocus.com/bid/46908
• https://exchange.xforce.ibmcloud.com/vulnerabilities/66166
• https://exchange.xforce.ibmcloud.com/vulnerabilities/66168

Get alerted when CVE-2011-0760 or the next vulnerability affects your stack