Afthemes

7 CVEs across 2 Afthemes products. Browse Afthemes vulnerabilities, severities, and proof-of-concept exploits.

Afthemes products with known CVEs

ProductCVEs
Wp Post Author4
Wp Post Author – Author Box, Multiple Authors, Guest Authors & Custom Avatars3
Afthemes CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2026-11977Medium6.52026-08-05The WP Post Author – Author Box, Multiple Authors, Guest Authors & Custom Avatars plugin for WordPress is vulnerable to generic SQL Injection via the 'wpma_met…
CVE-2024-13362Medium6.12026-05-01Multiple plugins and/or themes for WordPress are vulnerable to Reflected Cross-Site Scripting via the url parameter in various versions due to insufficient inp…
CVE-2024-56247High7.62025-01-02Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in AF themes WP Post Author wp-post-author allows SQL Inject…
CVE-2024-8757High7.22024-10-12The WP Post Author – Boost Your Blog's Engagement with Author Box, Social Links, Co-Authors, Guest Authors, Post Rating System, and Custom User Registrati…
CVE-2024-37101Medium6.52024-07-22Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in AF themes WP Post Author allows Stored XSS.This is…
CVE-2024-34389Medium4.32024-05-06Missing Authorization vulnerability in AF themes WP Post Author.This issue affects WP Post Author: from n/a through 3.6.4.
CVE-2024-34387Medium4.32024-05-06Missing Authorization vulnerability in AF themes WP Post Author.This issue affects WP Post Author: from n/a through 3.6.4.