Really Simple Security logo

Log out
Get PRO

Latest

Access violation vulnerability in WP Post Author – The Ideal Author Box for WordPress Posts, Co-Authors and Guest Authors with Author Login and Registration Form Builder 3.2.3

  • Severity: critical
  • Status: Fixed
  • Publication: June 28, 2023

The WP Post Author plugin for WordPress is not properly secured in versions up to 3.2.3. Attackers can use the /set-user-data and /v1/frontend/register-user REST API endpoints to gain access to the website. Once they have access, they can change their role to ‘administrator’, which would give them full control of the site.

Detected in:

Boost Your Blog's Engagement with WP Post Author: Add an Author Box, Social Links, Co-Authors, Guest Authors, Post Rating System, and Custom User Registration Form Builder fixed vulnerable versions:
Enhance Your Posts with Author Box, Social Links, Co-Authors, Guest Authors, and Post Rating System, including User Registration Form Builder – WP Post Author fixed vulnerable versions:
Enhance Your Posts with the WP Post Author Box, Co-Authors, Guest Authors, and Post Rating System Solution, including Registration Form Builder fixed vulnerable versions: >= * <= 3.2.3
Enhance Your Posts with the WP Post Author Box, Co-Authors, Guest Authors, and Post Rating System, including Registration Form Builder fixed vulnerable versions:
WP Post Author – Author Box, Co-Authors & Guest Authors fixed vulnerable versions:
WP Post Author – Boost Your Blog's Engagement with Author Box, Social Links, Co-Authors, Guest Authors, Post Rating System, and Custom User Registration Form Builder fixed vulnerable versions:
WP Post Author – Enhance Your Posts with the Author Bio, Co-Authors, Guest Authors, and Post Rating System, including User Registration Form Builder fixed vulnerable versions:

This information is sourced from www.wpvulnerability.com. An open-source database of vulnerabilities maintained by the community. Help us out by submitting vulnerabilities!

Version compare shows which versions have a vulnerability. For example: >= 2.2.8 <= 2.2.21 means:

> from 2.2.8
= including 2.2.8 & 2.2.21
< to 2.2.21

  • Incorrect?

Is this information incorrect? Please leave us a message.