Vendor

    AF themes

    7 known vulnerabilities in products by AF themes, 0 of them actively exploited (CISA KEV).

    Key figures

    7

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    0

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in AF themes
    MediumCVE-2026-11977

    WP Post Author <= 3.9.1 - Authenticated (Author+) SQL Injection

    		6.5
    HighCVE-2024-56247

    WordPress WP Post Author plugin <= 3.8.2 - SQL Injection vulnerability

    also in 1 other product

    		7.6
    HighCVE-2024-8757

    SQL Injection (CVE-2024-8757)

    		7.2
    MediumCVE-2024-13362

    Freemius <= 2.10.1 - Reflected DOM-Based Cross-Site Scripting via url Parameter

    also in 75 other products

    		6.1
    MediumCVE-2024-37101

    WordPress WP Post Author plugin <= 3.6.7 - Cross Site Scripting (XSS) vulnerability

    also in 1 other product

    		6.5
    MediumCVE-2024-34387

    WordPress WP Post Author plugin <= 3.6.4 - Rating Value Manipulation vulnerability

    also in 1 other product

    		4.3
    MediumCVE-2024-34389

    WordPress WP Post Author plugin <= 3.6.4 - Broken Access Control vulnerability

    also in 1 other product

    		4.3

    Products

    Products by AF themes
    AF themes WP Post Author40
    Wp Post Author – Author Box, Multiple Authors, Guest Authors & Custom Avatars30