Skip to content
Noroxi

afthemes records

5 published records for vendor afthemes.

Filter by product ↓

Researcher profile

Entered KEV
0 · 0%
Weaponized
0 · 0%
Pre-auth RCE
0
With a fix record
40%
Median publish → KEV
No record has entered KEV

Pre-auth RCE: flaws that let an attacker run code over the network without an account. Median publish → KEV: the typical time between a record being published and CISA listing it as exploited.

Records by year

  1. 24
  2. 25

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

5 records
  • CVE-2024-8757
    28Monitor

    Boost Your Blog's Engagement with WP Post Author <= 3.8.1 - Authenticated (Administrator+) SQL Injection

    HighCVSS 7.2No exploitEPSS 0%

    afthemes · wp post author – author box, multiple authors, guest authors & custom avatarsOct 12, 2024

  • CVE-2024-56247
    28Monitor

    WordPress WP Post Author plugin <= 3.8.2 - SQL Injection vulnerability

    HighCVSS 7.2No exploitEPSS 0%

    afthemes · wp post authorJan 2, 2025

  • CVE-2024-37101
    21Monitor

    WordPress WP Post Author plugin <= 3.6.7 - Cross Site Scripting (XSS) vulnerability

    MediumCVSS 5.4No exploitEPSS 0%

    afthemes · wp post authorJul 22, 2024

  • CVE-2024-34387
    17Monitor

    WordPress WP Post Author plugin <= 3.6.4 - Rating Value Manipulation vulnerability

    MediumCVSS 4.3No exploitEPSS 0%

    afthemes · wp post authorMay 6, 2024

  • CVE-2024-34389
    17Monitor

    WordPress WP Post Author plugin <= 3.6.4 - Broken Access Control vulnerability

    MediumCVSS 4.3No exploitEPSS 0%

    afthemes · wp post authorMay 6, 2024