[■] Plugin de WordPress

WP Post Author – Author Box, Multiple Authors, Guest Authors & Custom Avatars

14 expedientes en el radar

Comprueba tu versión de WP Post Author – Author Box, Multiple Authors, Guest Authors & Custom Avatars Sólo las que se están explotando

[■] Registro

Vulnerabilidades (14)

5,3 Media

CVE-2026-108685: falta de autorización en WP Post Author – Author Box, Multiple Authors, Guest Authors & Custom Avatars

CVE-2026-108685

T−18d 27 oct. 2026
5,3 Media

CVE-2026-108686: exposición de información sensible en WP Post Author – Author Box, Multiple Authors, Guest Authors & Custom Avatars

CVE-2026-108686

T−18d 27 oct. 2026
6,5 Media

CVE-2026-108125: inyección SQL en WP Post Author – Author Box, Multiple Authors, Guest Authors & Custom Avatars

CVE-2026-108125

T−36d 9 oct. 2026
4,9 Media

CVE-2026-108124: inyección SQL en WP Post Author – Author Box, Multiple Authors, Guest Authors & Custom Avatars

CVE-2026-108124

T−36d 9 oct. 2026
4,9 Media

CVE-2026-42708: inyección SQL en WP Post Author – Author Box, Multiple Authors, Guest Authors & Custom Avatars

CVE-2026-42708

T−37d 7 oct. 2026
6,5 Media

CVE-2026-11977: inyección SQL en WP Post Author – Author Box, Multiple Authors, Guest Authors & Custom Avatars

CVE-2026-11977

T−101d 4 ago. 2026
6,5 Media

CVE-2026-57643: inyección SQL en WP Post Author – Author Box, Multiple Authors, Guest Authors & Custom Avatars

CVE-2026-57643

T−141d 26 jun. 2026
6,1 Media

CVE-2024-13362: cross-site scripting (XSS) en Checkout with Cash App on WooCommerce y otras 131 tecnologías

CVE-2024-13362

T−197d 30 abr. 2026
4,9 Media

CVE-2024-56247: inyección SQL en WP Post Author – Author Box, Multiple Authors, Guest Authors & Custom Avatars

CVE-2024-56247

T−684d 30 dic. 2024
7,2 Alta

CVE-2024-8757: inyección SQL en WP Post Author – Author Box, Multiple Authors, Guest Authors & Custom Avatars

CVE-2024-8757

T−763d 11 oct. 2024
6,4 Media

CVE-2024-37101: cross-site scripting (XSS) en WP Post Author – Author Box, Multiple Authors, Guest Authors & Custom Avatars

CVE-2024-37101

T−877d 20 jun. 2024
4,3 Media

CVE-2024-34389: falta de autorización en WP Post Author – Author Box, Multiple Authors, Guest Authors & Custom Avatars

CVE-2024-34389

T−922d 6 may. 2024
4,3 Media

CVE-2024-34387: falta de autorización en WP Post Author – Author Box, Multiple Authors, Guest Authors & Custom Avatars

CVE-2024-34387

T−922d 6 may. 2024
9,8 Crít.

Gestión incorrecta de privilegios en WP Post Author – Author Box, Multiple Authors, Guest Authors & Custom Avatars

T−1235d 28 jun. 2023