Vulnerabilities

TI-2026-20135 CVE-2026-24950 · GHSA-mj9g-3f37-7qv2

WordPress Authorsy plugin <= 1.0.6 - Insecure Direct Object References (IDOR) vulnerability

LOW 39

Authorization Bypass Through User-Controlled Key vulnerability in themeplugs Authorsy authorsy allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Authorsy: from n/a through <= 1.0.…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.0029 Published 2026-02-20 No fix listed CWE-639

TI-2025-19877 CVE-2025-27006 · GHSA-xjwm-7c5r-6r68

WordPress Authorsy Plugin <= 1.0.5 - Cross Site Scripting (XSS) Vulnerability

LOW 28

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in themeplugs Authorsy authorsy allows Stored XSS.This issue affects Authorsy: from n/a through <= 1.0.5.

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00222 Published 2025-09-26 No fix listed CWE-79

Vulnerabilities

Filters

WordPress Authorsy plugin <= 1.0.6 - Insecure Direct Object References (IDOR) vulnerability

WordPress Authorsy Plugin <= 1.0.5 - Cross Site Scripting (XSS) Vulnerability