Advisories · Technology

AF themes WP Post Author.

Every CVE that names AF themes WP Post Author among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-42708 CVE record

CVSS 7.6 High

WordPress WP Post Author plugin <= 4.0.0 - SQL Injection vulnerability
- AF themes WP Post Author
- SQL injection
Not analysed yet 7 Oct 2026
CVE-2026-57643 CVE record

CVSS 8.5 High

WordPress WP Post Author plugin <= 3.9.1 - SQL Injection vulnerability
- AF themes WP Post Author
- SQL injection
Not analysed yet 26 Jun 2026
CVE-2024-56247 CVE record

CVSS 7.6 High

WordPress WP Post Author plugin <= 3.8.2 - SQL Injection vulnerability
- AF themes WP Post Author
- SQL injection
Not analysed yet 2 Jan 2025
CVE-2024-37101 CVE record

CVSS 6.5 Medium

WordPress WP Post Author plugin <= 3.6.7 - Cross Site Scripting (XSS) vulnerability
- AF themes WP Post Author
- Cross-site scripting (XSS)
Not analysed yet 22 Jul 2024
CVE-2024-34387 CVE record

CVSS 4.3 Medium

WordPress WP Post Author plugin <= 3.6.4 - Rating Value Manipulation vulnerability
- AF themes WP Post Author
- Broken access control
Not analysed yet 6 May 2024
CVE-2024-34389 CVE record

CVSS 4.3 Medium

WordPress WP Post Author plugin <= 3.6.4 - Broken Access Control vulnerability
- AF themes WP Post Author
- Broken access control
Not analysed yet 6 May 2024