Wp Post Author

3 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2024-37101 MEDIUM This Month

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in AF themes WP Post Author allows Stored XSS.6.7. Rated medium severity (CVSS 5.4), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

XSS Wp Post Author

NVD

CVSS 3.1

5.4

EPSS

0.3%

CVE-2024-34389 MEDIUM This Month

Missing Authorization vulnerability in AF themes WP Post Author.6.4. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Authentication Bypass Wp Post Author

NVD

CVSS 3.1

4.3

EPSS

0.1%

CVE-2024-34387 MEDIUM This Month

Missing Authorization vulnerability in AF themes WP Post Author.6.4. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Authentication Bypass Wp Post Author

NVD

CVSS 3.1

4.3

EPSS

0.1%

CVE-2024-37101

EPSS 0% CVSS 5.4

MEDIUM This Month

XSS Wp Post Author

NVD

CVE-2024-34389

EPSS 0% CVSS 4.3

MEDIUM This Month

Missing Authorization vulnerability in AF themes WP Post Author.6.4. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Authentication Bypass Wp Post Author

NVD

CVE-2024-34387

EPSS 0% CVSS 4.3

MEDIUM This Month

Missing Authorization vulnerability in AF themes WP Post Author.6.4. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Authentication Bypass Wp Post Author

NVD