Really Simple Security logo

Log out
Get PRO

Latest

Input validation vulnerability in WP Post Author – Boost Your Blog's Engagement with Author Box, Social Links, Co-Authors, Guest Authors, Post Rating System, and Custom User Registration Form Builder 3.8.2

  • Severity: medium-risk
  • Status: Fixed
  • Publication: December 30, 2024

The WP Post Author plugin for WordPress has a security issue that allows hackers to access sensitive information from the database. This vulnerability is present in versions 3.8.2 and earlier, as the plugin does not properly protect against SQL Injection attacks. This means that attackers with administrator-level access or higher can add their own malicious code to existing queries and retrieve sensitive data from the database.

Detected in:

Enhance Your Posts with the WP Post Author Box, Co-Authors, Guest Authors, and Post Rating System Solution, including Registration Form Builder fixed vulnerable versions: >= * <= 3.8.2
WP Post Author – Author Box, Co-Authors & Guest Authors fixed vulnerable versions:
WP Post Author – Boost Your Blog's Engagement with Author Box, Social Links, Co-Authors, Guest Authors, Post Rating System, and Custom User Registration Form Builder fixed vulnerable versions:

This information is sourced from www.wpvulnerability.com. An open-source database of vulnerabilities maintained by the community. Help us out by submitting vulnerabilities!

Version compare shows which versions have a vulnerability. For example: >= 2.2.8 <= 2.2.21 means:

> from 2.2.8
= including 2.2.8 & 2.2.21
< to 2.2.21

  • Incorrect?

Is this information incorrect? Please leave us a message.