Skip to content
OpenAdvisories

Vendor

AF themes

8 known vulnerabilities.

Products

WP Post Author 6 WP Post Author – Author Box, Multiple Authors, Guest Authors & Custom Avatars 2
All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • Medium 6.5
    CVE-2026-11977

    WP Post Author <= 3.9.1 - Authenticated (Author+) SQL Injection

    The WP Post Author – Author Box, Multiple Authors, Guest Authors & Custom Avatars plugin for WordPress is vulnerable to generic SQL Injection via the 'wpma_metabox_authors_list' parameter in all versions up to, and including, 3.9.1 due to insufficient escapin…

    AF themes WP Post Author – Author Box, Multiple Authors, Guest Authors & Custom Avatars Web / CMS
  • Medium 6.5
    CVE-2024-37101

    WordPress WP Post Author plugin <= 3.6.7 - Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in AF themes WP Post Author allows Stored XSS.This issue affects WP Post Author: from n/a through 3.6.7.

    AF themes WP Post Author
  • Medium 4.3
    CVE-2024-34387

    WordPress WP Post Author plugin <= 3.6.4 - Rating Value Manipulation vulnerability

    Missing Authorization vulnerability in AF themes WP Post Author.This issue affects WP Post Author: from n/a through 3.6.4.

    AF themes WP Post Author
  • Medium 4.3
    CVE-2024-34389

    WordPress WP Post Author plugin <= 3.6.4 - Broken Access Control vulnerability

    Missing Authorization vulnerability in AF themes WP Post Author.This issue affects WP Post Author: from n/a through 3.6.4.

    AF themes WP Post Author