Read the docs

AF themes

Records9All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high4CVSS 7.0–8.9

Exploited now

AF themes records in CISA KEV

No AF themes vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Wp Post Author 4 records LOW

Records

4 records in Wp Post Author · all components

TI-2024-37217 CVE-2024-56247 · GHSA-qq73-pjw7-j745

WordPress WP Post Author plugin <= 3.8.2 - SQL Injection vulnerability

Priority LOW 34

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in AF themes WP Post Author wp-post-author allows SQL Injection.This issue affects WP Post Author: from n/a through <= 3.…

CVSS 3.1HIGH 7.6 Network High privileges No interaction EPSS 0.00494 Published 2025-01-02 No fix listed CWE-89
TI-2024-24630 CVE-2024-37101 · GHSA-9r67-wg3r-q52g

WordPress WP Post Author plugin <= 3.6.7 - Cross Site Scripting (XSS) vulnerability

Priority LOW 28

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in AF themes WP Post Author allows Stored XSS.This issue affects WP Post Author: from n/a through 3.6.7.

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00261 Published 2024-07-22 No fix listed CWE-79
Open these records in search →