Skip to content
OpenAdvisories
Medium · 4.9 CVE-2026-108124 EUVD-2026-95819GHSA-h96v-hrqg-p7pf

WordPress Post Author Authenticated SQLi

Published Oct 9, 2026 · Updated Oct 9, 2026 · Assigned by tenable

Description

Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in wp-post-author.

This issue affects wp-post-author before 4.1.0.

Affected products

VendorProductAffectedFixed
— wp-post-author < 4.1.0 4.1.0

References