Description
WordPress Plugin Post Recommendations for WordPress is prone to a remote file include vulnerability because it fails to sufficiently sanitize user-supplied data. Exploiting this issue may allow an attacker to compromise the application and the underlying system; other attacks are also possible. WordPress Plugin Post Recommendations for WordPress version 1.1.2 is vulnerable; prior versions may also be affected.
Remediation
Update to the latest version
References
Related Vulnerabilities
Roundcube Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2010-0464)
WordPress Plugin Migration, Backup, Staging-WPvivid Security Bypass (0.9.35)
WordPress Plugin GS Products Slider for WooCommerce Cross-Site Scripting (1.5.8)
Joomla Incorrect Authorization Vulnerability (CVE-2023-23751)