CVE-2026-121724: WordPress Contextual Related Posts plugin <= 4.5.3 - Broken Access Control vulnerability
Missing Authorization vulnerability in WebberZone Contextual Related Posts contextual-related-posts allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Contextual Related Posts: from n/a through 4.5.3.
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
WebberZone Contextual Related Poststo a version that resolves this vulnerability.Fixed in 4.5.4
Event History
Frequently Asked Questions
Which installations should be considered affected?
Installations using the WebberZone Contextual Related Posts plugin in versions through 4.5.3 are identified as affected. The available information does not state whether any specific configuration or deployment scenario is excluded.
What access would an attacker need to exploit this issue?
The available information identifies missing authorization and incorrectly configured access-control levels, but does not specify the attacker’s required role, authentication status, or the affected functionality.
How can I determine whether my site is affected?
Check whether Contextual Related Posts is installed and determine its installed version. Versions through 4.5.3 are within the stated affected range; no further detection indicators are provided.