Skip to content
OpenAdvisories
High · 7.1 CVE-2026-108125 EUVD-2026-95821GHSA-77c9-9grr-g9r2

WordPress Post Author Authenticated SQLi

Published Oct 9, 2026 · Updated Oct 9, 2026 · Assigned by tenable

Description

Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in wp-post-author.

This issue affects wp-post-author version 4.0.0 prior to 4.1.0.

Affected products

VendorProductAffectedFixed
— wp-post-author 4.0.0 – < 4.1.0 4.1.0

References