EUVD-2025-204651

The Frontend Post Submission Manager Lite plugin for WordPress is vulnerable to Missing Authorization in all versions up to, and including, 1.2.5. This is due to missing authorization checks on the post update functionality in the fpsmlformprocess AJAX action. This makes it possible for...

EUVD-2024-34759

Malicious code in bioql PyPI...

EUVD-2025-17167

Malicious code in bioql PyPI...

EUVD-2024-34761

Malicious code in bioql PyPI...

EUVD-2024-53045

Malicious code in bioql PyPI...

EUVD-2024-36428

Malicious code in bioql PyPI...

EUVD-2025-2754

Malicious code in bioql PyPI...

CVE-2025-28950

Cross-Site Request Forgery CSRF vulnerability in David Shabtai Post Author post-author allows Stored XSS.This issue affects Post Author: from n/a through = 1.1.1...

CVE-2025-28950

Cross-Site Request Forgery CSRF vulnerability in David Shabtai Post Author post-author allows Stored XSS.This issue affects Post Author: from n/a through = 1.1.1...

CVE-2025-28950

CVE-2025-28950: The WordPress plugin Post Author (David Shabtai) is affected by a CSRF vulnerability that can lead to Stored XSS. The vulnerability is reported for Post Author versions up to 1.1.1 (no details on patch status are provided in the connected documents). Public sources in the Connecte...

CVE-2025-28950 WordPress Post Author plugin <= 1.1.1 - Cross Site Request Forgery (CSRF) Vulnerability

Cross-Site Request Forgery CSRF vulnerability in David Shabtai Post Author post-author allows Stored XSS.This issue affects Post Author: from n/a through = 1.1.1...

CVE-2025-28950 WordPress Post Author plugin <= 1.1.1 - Cross Site Request Forgery (CSRF) Vulnerability

Cross-Site Request Forgery CSRF vulnerability in David Shabtai Post Author post-author allows Stored XSS.This issue affects Post Author: from n/a through = 1.1.1...

PT-2025-24123 · Unknown · Post Author

Name of the Vulnerable Software and Affected Versions: Post Author versions n/a through 1.1.1 Description: The issue is a Cross-Site Request Forgery CSRF vulnerability that allows Stored XSS. This means an attacker can trick a user into performing unintended actions on a web application, and also...

WordPress plugin Post Author 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. Cross-site request forgery...

WordPress Post Author plugin <= 1.1.1 - Cross Site Request Forgery (CSRF) Vulnerability

Cross Site Request Forgery CSRF Vulnerability discovered by Nguyen Thi Huyen Trang - Skalucy in WordPress Plugin Post Author versions = 1.1.1...

CVE-2024-1840

The wpbakery plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Post Author tag attribute in all versions up to, and including, 7.5 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with contributor access or...

CVE-2024-37101

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in AF themes WP Post Author allows Stored XSS.This issue affects WP Post Author: from n/a through 3.6.7...

CVE-2025-22355

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in asokaaso2 Kikx Simple Post Author Filter sa-post-author-filter allows Reflected XSS.This issue affects Kikx Simple Post Author Filter: from n/a through = 1.0...

CVE-2024-56247

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in AF themes WP Post Author wp-post-author allows SQL Injection.This issue affects WP Post Author: from n/a through = 3.8.2...

CVE-2025-22355

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in asokaaso2 Kikx Simple Post Author Filter sa-post-author-filter allows Reflected XSS.This issue affects Kikx Simple Post Author Filter: from n/a through = 1.0...