IGIT Related Posts and Post Nudges
IGIT Related Posts and Post Nudges has one disclosed vulnerability in the WordSec catalog, all reported in 2025; it is fixed as of September 2026. Their average CVSS score is 6.4, and the most serious one scores 6.4 out of 10.
The most common weakness is Cross-Site Scripting, behind 1 of the records (100%).
The one issue recorded for IGIT Related Posts and Post Nudges has a vendor fix available, so running the current release closes it.
All of these findings were reported by johska. IGIT Related Posts and Post Nudges is installed on roughly 100 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 7.0.4.
CVE-2025-46518IGIT Related Posts With Thumb Image After Posts <= 4.5.3 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Read the full analysisVulnerability Records
IGIT Related Posts and Post Nudges
Author
phpaddicted
Plugin Home Page | Support IGIT Related Posts With Thumb automatically shows related posts after your content using thumbnails, multiple layouts, and smart relation methods. It is lightweight, highly configurable, and developer-friendly. Looking for even more power? The Pro add-on unlocks Analytics, Async Loading, Post Nudges, and Custom Post Type support. Free Features Display & Layouts Six layouts: Grid, List, Compact, Masonry, Carousel, and Chip/Pill Responsive grid columns — configure desktop, tablet, and mobile breakpoints independently Configurable heading text, heading level (H2–H4), and optional show/hide Show or hide: thumbnail, title, excerpt (with word-length control), publish date, estimated reading time, comment count, and category badge Open links in same tab or new tab with optional rel=”nofollow” Custom CSS field for per-site style tweaks Custom “no related posts” message Relation Methods Category – posts sharing the same category Tag – posts sharing common tags Both – category AND tag combined (recommended) Full-text – content similarity search Author – posts by the same author Series – custom igit_series taxonomy grouping Query Control Post count per widget/block/global (1–20) Exclude specific categories or post IDs Minimum shared-term overlap threshold (1–5) Maximum post age filter (days) Rotate/shuffle results on every page load Fallback when no match found: Recent, Popular, Random, or None Thumbnails Uses WordPress native image sizes — no third-party resizing library Automatic image discovery: featured image → content scan → attachment → custom placeholder Upload a custom default placeholder image Cache Transient-based query cache with configurable TTL (default 12 hours) Supports WordPress Object Cache when available WP-CLI command to flush cache per-post or globally Placement Options Auto-append after post content [igit_related_posts] shortcode with count, layout, and relate_by attributes Gutenberg Block – “Related Posts” block with per-block post count and layout Elementor Widget – per-widget control of all display settings Classic Widget – sidebar widget with title, post count, and layout Per-post Metabox – override count, layout, relation method, and pin specific posts per post Developer Friendly Theme template override: place igit-rpwt/template.php in your theme Filters: igit_rpwt_query_args, igit_rpwt_posts_filtered, igit_rpwt_template_file, igit_rpwt_output WP-CLI: wp igit-rpwt flush-cache REST-API-exposed igit_series custom taxonomy Pro Features Analytics — Track every related post click. View top-performing posts, daily totals, and breakdowns by source (widget vs. nudge) from your WP dashboard. Configurable data retention with automatic daily cleanup. Async Loading — Load related posts via AJAX after the page renders, improving TTFB on cached pages without sacrificing content. Post Nudges — Floating notification cards that surface a relevant post to keep visitors engaged. Choose from Compact, Card, and Minimal styles; position bottom-right/left or top-right/left; trigger on page load, 50% scroll, or exit intent; configure auto-dismiss duration and show interval. Animations include slide, fade, bounce, flip, zoom, and more. Custom Post Type Support — Extend related posts to any registered public post type. Get the Pro add-on →
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C