CVE-2024-34389

CVE-2024-34389 is a Missing Authorization vulnerability in the AF Themes WP Post Author plugin. Red Hat’s security entry attributes this to WP Post Author and lists affected versions as up to 3.6.4. The connected documents do not provide technical details about the vulnerability’s root cause beyo...

CVE-2024-37101

CVE-2024-37101: An stored XSS in the WordPress plugin WP Post Author (Enhance Your Posts with Author Box, Social Links, Co-Authors, Guest Authors, and Post Rating System, including User Registration Form Builder) affecting WP Post Author versions from n/a up to 3.6.7. Description indicates Improp...

CVE-2024-34387

CVE-2024-34387 describes a Missing Authorization issue in the WordPress plugin WP Post Author (AF themes). The vulnerability affects WP Post Author versions from unspecified earliest through 3.6.4. Public references in the connected Red Hat advisory repeat the missing-authorization characterizati...

CVE-2024-56247

CVE-2024-56247: In the WP Post Author plugin, improper neutralization of SQL elements enables SQL Injection. Affected: WP Post Author