YARPP – Yet Another Related Posts Plugin
YARPP – Yet Another Related Posts Plugin has 8 disclosed vulnerabilities in the WordSec catalog, reported between 2015 and 2024; all 8 are fixed as of September 2026. Their average CVSS score is 6.8, and the most serious one scores 9.8 out of 10. Severity breakdown: 1 critical and 2 high. 2023 was the busiest year with 4 disclosures.
The most common weakness is Cross-Site Scripting, behind 4 of the records (50%). Other recurring categories include Cross-Site Request Forgery (CSRF), Missing Authorization.
Every one of the 8 issues recorded for YARPP – Yet Another Related Posts Plugin has a vendor fix available, so running the current release closes all known holes.
5 independent researchers contributed these findings, most of them (2) reported by Akbar Kustirama. YARPP – Yet Another Related Posts Plugin is installed on roughly 100,000 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 6.7.7.
YARPP – Yet Another Related Posts Plugin < 4.2.5 - Cross-Site Request Forgery
Read the full analysisVulnerability Records

YARPP – Yet Another Related Posts Plugin
Author
YARPP
Related Posts Plugin for WordPress Yet Another Related Posts Plugin (YARPP) is a professionally maintained, highly customizable, performant and feature rich plugin that displays pages, posts, and custom post types related to the current entry. YARPP introduces your visitors to other relevant content on your site — boosting visitor engagement, time on site and SEO. Related Posts can increase your pageviews up to 10%. Simply install, activate and watch your sessions and pageviews increase. Key Features An advanced and versatile algorithm: Using a customizable algorithm considering post titles, content, tags, categories, and custom taxonomies, YARPP finds related content from across your site Caching: Inbuilt cache makes subsequent queries super efficient and fast Custom Templates and Styles: Use a pre-built list or thumbnail template, or use the YARPP custom templating system for 100% control of how results are styles and displayed Flexible with a full range of placement options, including: Automatic Display Options (pick where to show YARPP from the YARPP settings page) RSS/Feed Options Block Editor (Gutenberg) [yarpp] Shortcode Widget YARPP functions() REST API Works with all languages, including those with full-width (double-byte) characters and those that don’t use spaces between words Custom post type and taxonomy support WordPress Multisite support bbPress forums support WooCommerce support Professionally maintained and supported with regular updates YARPP Algorithm Explained Contribute: Translate YARPP YARPP is available for translation directly on WordPress.org. Please check out the official Translator Handbook. Wide Support YARPP is the most popular and the highest rated Related Posts Plugin for WordPress. With your support, this plugin always strives to be the best WordPress plugin for Content Discovery and Related Posts. ✔ Over 10 years of development ✔ Over 6 million downloads ✔ Translated into more than a dozen languages ✔ Professionally maintained and actively supported with regular updates ✔ Works with all languages YARPP works best with PHP 5.3 or greater, MySQL 5.6 or greater OR MariaDB 10.1 or greater, and WordPress 3.7 or greater. See the FAQ for answers to common questions.
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C