Medium
CVE-2026-42708
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 10
Reset filters
Medium
CVE-2026-11977
WP Post Author <= 3.9.1 - Authenticated (Author+) SQL Injection
Medium
CVE-2026-57643
WP Post Author – Author Box, Multiple Authors, Guest Authors & Custom Avatars <= 3.9.1 - Authenticated (Contributor+) SQL Injection
Medium
CVE-2024-13362
Freemius <= 2.10.1 - Reflected DOM-Based Cross-Site Scripting via url Parameter
Medium
CVE-2024-56247
WP Post Author <= 3.8.2 - Authenticated (Administrator+) SQL Injection
High
CVE-2024-8757
Boost Your Blog's Engagement with WP Post Author <= 3.8.1 - Authenticated (Administrator+) SQL Injection
Medium
CVE-2024-37101
WP Post Author <= 3.6.7 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-34389
WP Post Author – Enhance Your Posts with the Author Bio, Co-Authors, Guest Authors, and Post Rating System, including User Registration Form Builder <= 3.7.4 - Missing Authorization
Medium
CVE-2024-34387
WP Post Author – Enhance Your Posts with the Author Bio, Co-Authors, Guest Authors, and Post Rating System, including User Registration Form Builder <= 3.6.4 - Missing Authorization to Rating Manipulation
Critical
155e3de1-e115-4683-bb4d-a0c5667dc3d3
WP Post Author <= 3.2.3 - Privilege Escalation
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.