CM
Product
Co-Authors, Multiple Authors and Guest Authors in an Author Box with PublishPress Authors
3
CVEs
0
On KEV
8.8
Max CVSS
1
New 30D
Severity mix
Critical 0High 1Medium 2Low 0
Watch
Add Co-Authors, Multiple Authors and Guest Authors in an Author Box with PublishPress Authors to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2024-9215 | 8.8 | Oct 17 | Co-Authors, Multiple Authors and Guest Authors in an Author Box with PublishPress Authors <= 4.7.1 - Insecure Direct Object Reference to Authenticated (Author+) Arbitrary User Email Update and Account Takeover Affected: through 4.7.1 |
| CVE-2026-111592 New | 6.4 | Oct 31 | Co-Authors, Multiple Authors and Guest Authors in an Author Box with PublishPress Authors <= 4.17.0 - Authenticated (Subscriber+) Stored Cross-Site Scripting via display_name profile-sync into author term name Affected: through 4.17.0 |
| CVE-2026-85657 | 5.4 | Sep 15 | Co-Authors, Multiple Authors and Guest Authors in an Author Box with PublishPress Authors <= 4.15.0 - Authenticated (Author+) Stored Cross-Site Scripting via 'profile_fields_user_email_value_prefix' Parameter Affected: through 4.15.0 |
Showing 3