Plugin icon

WP Post Author – Author Box, Multiple Authors, Guest Authors & Custom Avatars

wp-post-author

Vulnerabilities:

11

Last Updated:

October 14, 2026

Active Installs:

10000

Published
Title
Fixed in
CVSS
Published
2026-10-09
Title
WP Post Author 4.0.0 - Authenticated (Contributor+) SQL Injection
Fixed in
Fixed in 4.1.0
CVSS
4.9 (medium)
Published
2026-10-09
Title
WP Post Author < 4.1.0 - Authenticated (Admin+) SQL Injection
Fixed in
Fixed in 4.1.0
CVSS
4.9 (medium)
Published
2026-10-07
Title
WP Post Author – Author Box, Multiple Authors, Guest Authors & Custom Avatars < 4.0.1 - Authenticated (Administrator+) SQL Injection
Fixed in
Fixed in 4.0.1
CVSS
4.9 (medium)
Published
2026-08-04
Title
WP Post Author < 3.10.0 - Authenticated (Author+) SQL Injection
Fixed in
Fixed in 3.10.0
CVSS
4.9 (medium)
Published
2026-06-26
Title
WP Post Author – Author Box, Multiple Authors, Guest Authors & Custom Avatars < 3.10.0 - Authenticated (Contributor+) SQL Injection
Fixed in
Fixed in 3.10.0
CVSS
4.9 (medium)
Published
2026-04-30
Title
Freemius < 2.11.0 - Reflected DOM-Based XSS via url Parameter
Fixed in
Fixed in 3.8.4
CVSS
7.1 (high)
Published
2024-12-30
Title
WP Post Author < 3.8.3 - Authenticated (Administrator+) SQL Injection
Fixed in
Fixed in 3.8.3
CVSS
4.9 (medium)
Published
2024-10-11
Title
Boost Your Blog's Engagement with WP Post Author < 3.8.2 - Authenticated (Administrator+) SQL Injection
Fixed in
Fixed in 3.8.2
CVSS
7.2 (high)
Published
2024-06-20
Title
WP Post Author < 3.6.8 - Authenticated (Contributor+) Stored Cross-Site Scripting
Fixed in
Fixed in 3.6.8
CVSS
6.4 (medium)
Published
2024-05-06
Title
WP Post Author < 3.7.5 - Missing Authorization
Fixed in
Fixed in 3.7.5
CVSS
4.3 (medium)
Published
2024-05-06
Title
WP Post Author < 3.6.5 - Subscriber+ Rating Manipulation
Fixed in
Fixed in 3.6.5
CVSS
4.3 (medium)