Related Posts by Taxonomy

Related Posts by Taxonomy has one disclosed vulnerability in the WordSec catalog, all reported in 2026; it is fixed as of September 2026. Their average CVSS score is 6.4, and the most serious one scores 6.4 out of 10.

The most common weakness is Cross-Site Scripting, behind 1 of the records (100%).

The one issue recorded for Related Posts by Taxonomy has a vendor fix available, so running the current release closes it.

All of these findings were reported by Muhammad Yudha - DJ. Related Posts by Taxonomy is installed on roughly 10,000 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 7.1.

Strategic Overview

Avg CVSSMedium
6.4/ 10
Patch Coverage100%
Open

0

Fixed

1

Get automatic notifications for all Related Posts by Taxonomy vulnerabilities before they are exploited.

Highest severity on recordCVSS 6.4CVE-2026-0916

Related Posts by Taxonomy <= 2.7.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'related_posts_by_tax' Shortcode

Read the full analysis

Vulnerability Records

1 records
Related Posts by Taxonomy banner
Latestv2.7.10

Related Posts by Taxonomy

keesiemeijer

Author

keesiemeijer

4.8(77)
96/100
Last Updated
2026-08-21 (23d ago)
Active Installs
10,000+
Downloads
329,718
Requires WP
5.9+
Requires PHP
0+
Tested up to
WP 7.1
Created
2013-05-10 (14y ago)

Quickly increase your readers’ engagement by adding related posts in the sidebar or after post content with a widget or shortcode. Posts with the most terms in common will display at the top! This plugin is capable of finding related posts in multiple taxonomies and post types. Include or exclude terms from the search for related posts. Change the look and feel by using your own templates in a (child) theme. plugin documentation Plugin features: Widget and Shortcode. Display related posts as post thumbnails, links, excerpts or full posts. Small Footprint. Doesn’t slow down your site! Automatic display of related posts after the post content. Exclude or include terms and posts. Search for related posts in single or multiple taxonomies and post types. Limit the search for related posts by date, number or post meta. Use your own HTML templates for display of the related posts. Extensive plugin documentation. Follows WordPress coding standards and plugin best practices. Highly Adjustable! For the following features you need to be somewhat familiar with WordPress hooks. The plugin documentation has many examples to help you along. Extended features: Use a persistent cache for the related posts query. (opt-in feature) Use the WordPress REST API to get related posts. (opt-in feature) Load related posts after the whole page has loaded (with Ajax). (opt-in feature) Use plugin functions in your theme templates to display related posts yourself. Use Filters to change the default behavior of the plugin. Follow this plugin on GitHub. Search the code reference See the FAQ to have related posts automatically display after the post content without using the shortcode or widget. Default usage for the shortcode is: [related_posts_by_tax] Attributes for the shortcode are: post_id taxonomies post_types posts_per_page order orderby before_shortcode after_shortcode title show_date before_title after_title include_terms include_parents include_children exclude_terms exclude_posts format gallery_format image_size columns caption link_caption limit_posts limit_month meta_key meta_value meta_compare meta_type public_only include_self post_class Example to show 10 related posts instead of the default 5. [related_posts_by_tax posts_per_page="10"] See the documentation for more information about these attributes. Translations Dutch French (by Annie Stasse) Spanish (by Ludobooks – Cuentos personalizados) Catalan (by Ludobooks – Cuentos personalizados) Polish (by koda0601)

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C