CVE-2021-24211: Sovrn WordPress Related Posts
Medium severity, CVSS 5.4. EPSS: 0.6% chance of exploitation in the next 30 days.
The WordPress Related Posts plugin through 3.6.4 contains an authenticated (admin+) stored XSS vulnerability in the title field on the settings page. By exploiting that an attacker will be able to execute JavaScript code in the user's browser.
Affected products
- Sovrn WordPress Related Posts: up to and including 3.6.4
Published 2021-04-05. Last modified 2026-06-17.