CVE-2025-68033 WordPress Custom Related Posts plugin <= 1.8.0 - Sensitive Data Exposure vulnerability
An attacker can retrieve sensitive data exposed by the Custom Related Posts plugin, potentially compromising user privacy or site security.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2025-68033?
CVE-2025-68033 is a high-severity vulnerability in Brecht Custom Related Posts, published on 5 Jan 2026. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
Insertion of Sensitive Information Into Sent Data vulnerability in Brecht Custom Related Posts custom-related-posts allows Retrieve Embedded Sensitive Data.This issue affects Custom Related Posts: from n/a through <= 1.8.0.
Weakness: CWE-201
Which versions are affected by CVE-2025-68033?
How do I fix CVE-2025-68033?
No fix has been published for CVE-2025-68033 yet. Limit exposure of the affected software until one is available.
Is CVE-2025-68033 being exploited?
There is no known exploitation of CVE-2025-68033 in the wild and no public exploit code.
Sources
Also known as GHSA-qppc-993h-86qq.