WordPress Authorsy plugin <= 1.0.6 - Insecure Direct Object References (IDOR) vulnerability

Insecure Direct Object References IDOR vulnerability discovered by NumeX in WordPress Plugin Authorsy versions = 1.0.6...

WordPress plugin Authorsy cross-site scripting vulnerability

WordPress is a blogging platform developed using the PHP language. The platform has the ability to set up a personal blog site on a PHP and MySQL based server.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists in the WordPress plugin Authorsy, which stems from...

CVE-2025-27006

CVE-2025-27006 concerns the WordPress plugin Authorsy (themeplugs Authorsy). The issue is a Stored XSS caused by improper neutralization of input during web page generation, affecting Authorsy versions up to 1.0.5. The CVSS 3.1 base score is 6.5 (Medium) with network attack vector, low attack com...