Input validation vulnerability in Author Box, Guest Author and Co-Authors for Your Posts – Molongui 4.6.19

The Molongui plugin for WordPress is vulnerable to a security threat called Stored Cross-Site Scripting. This means that an attacker with administrator-level permissions can inject malicious code into webpages. If a user visits one of these pages, the malicious code will be executed. This only affects multi-site installations or installations where the security setting “unfiltered_html” has been disabled. Updating the plugin to the latest version (4.6.19) will help protect against this vulnerability.