CVE-2021-24537: Shareaholic Similar Posts

High severity, CVSS 7.2. EPSS: 1.6% chance of exploitation in the next 30 days.

The Similar Posts WordPress plugin through 3.1.5 allow high privilege users to execute arbitrary PHP code in an hardened environment (ie with DISALLOW_FILE_EDIT, DISALLOW_FILE_MODS and DISALLOW_UNFILTERED_HTML set to true) via the 'widget_rrm_similar_posts_condition' widget setting of the plugin.

Affected products

• Shareaholic Similar Posts: up to and including 3.1.5

Published 2021-11-08. Last modified 2026-06-17.