Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

9 records

Vendor: AF themes Clear all filters
TI-2026-69111 CVE-2026-42708 · GHSA-fgfm-xfjj-4qr9

Blind SQL injection in WP Post Author WordPress plugin

Priority LOW 33

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in AF themes WP Post Author wp-post-author allows Blind SQL Injection.This issue affects WP Post Author: from n/a through…

CVSS 3.1HIGH 7.6 Network High privileges No interaction EPSS 0.00226 Published 2026-10-07 No fix listed CWE-89
TI-2026-10321 CVE-2026-11977 · GHSA-xjmx-223q-52rw

WP Post Author <= 3.9.1 - Authenticated (Author+) SQL Injection

Priority LOW 29

The WP Post Author – Author Box, Multiple Authors, Guest Authors & Custom Avatars plugin for WordPress is vulnerable to generic SQL Injection via the 'wpma_metabox_authors_list' parameter in all versions up to, and inclu…

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00413 Published 2026-08-05 No fix listed CWE-89
TI-2024-12404 CVE-2024-13362 · GHSA-c7cj-88jr-mhx2

Freemius <= 2.10.1 - Reflected DOM-Based Cross-Site Scripting via url Parameter

Priority LOW 27

Multiple plugins and/or themes for WordPress are vulnerable to Reflected Cross-Site Scripting via the url parameter in various versions due to insufficient input sanitization and output escaping.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00276 Published 2026-05-01 No fix listed CWE-79
TI-2024-37217 CVE-2024-56247 · GHSA-qq73-pjw7-j745

WordPress WP Post Author plugin <= 3.8.2 - SQL Injection vulnerability

Priority LOW 34

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in AF themes WP Post Author wp-post-author allows SQL Injection.This issue affects WP Post Author: from n/a through <= 3.…

CVSS 3.1HIGH 7.6 Network High privileges No interaction EPSS 0.00494 Published 2025-01-02 No fix listed CWE-89
TI-2024-08123 CVE-2024-8757 · GHSA-qvrf-qm4g-4557

Boost Your Blog's Engagement with WP Post Author <= 3.8.1 - Authenticated (Administrator+) SQL Injection

Priority HIGH 67

The WP Post Author – Boost Your Blog&#039;s Engagement with Author Box, Social Links, Co-Authors, Guest Authors, Post Rating System, and Custom User Registration Form Builder plugin for WordPress is vulnerable to time-ba…

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.00506 Published 2024-10-12 No fix listed CWE-89
TI-2024-24630 CVE-2024-37101 · GHSA-9r67-wg3r-q52g

WordPress WP Post Author plugin <= 3.6.7 - Cross Site Scripting (XSS) vulnerability

Priority LOW 28

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in AF themes WP Post Author allows Stored XSS.This issue affects WP Post Author: from n/a through 3.6.7.

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00261 Published 2024-07-22 No fix listed CWE-79