Vulnerabilities / Contextual Related Posts / WPSEC-2026-1169
Contextual Related Posts <= 4.5.1 - Unauthenticated Sensitive Information Exposure via Related Post Thumbnails of Password-Protected Posts
Medium 5.3
CWE-200Fixed in 4.5.2
- ID
- WPSEC-2026-1169
- Plugin
- Contextual Related Posts (contextual-related-posts)
- Affected
- all versions before 4.5.2
- Remediation
- Update to 4.5.2 or later.
- CVSS 3.1
- CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
- Weakness
- CWE-200
- Usage
- Plugin Medium · Affected versions Medium among sites WPSec scans, 2026-10-17
- Attack surface
- Contextual Related Posts on WPSec AttackSurface
- Fix released
- Published
Description
The Contextual Related Posts plugin for WordPress is vulnerable to Sensitive Information Exposure via related post thumbnails in all versions up to, and including, 4.5.1, due to the thumbnail logic not checking whether a related post is password-protected before scanning its content and its first attached image for a thumbnail. This makes it possible for unauthenticated attackers to view images embedded in or attached to password-protected posts without knowing the post password, because those images are shown as thumbnails in the related-posts output.
References
- https://wpsec.com/vuln/WPSEC-2026-1169/
- https://plugins.svn.wordpress.org/contextual-related-posts/tags/4.5.2/
- https://wordpress.org/plugins/contextual-related-posts/
Published by WPSec. Provided as is, without warranty. Corrections: contact us.
This advisory as JSON or Markdown · All advisories: JSON, RSS