WordPress Vulnerability Scanner WPSec
Vulnerabilities / Co-Authors, Multiple Authors and Guest Authors in an Author Box with PublishPress Authors

Co-Authors, Multiple Authors and Guest Authors in an Author Box with PublishPress Authors vulnerabilities

Advisories WPSec published for Co-Authors, Multiple Authors and Guest Authors in an Author Box with PublishPress Authors. Other sources may list more. Its attack surface: Co-Authors, Multiple Authors and Guest Authors in an Author Box with PublishPress Authors on WPSec AttackSurface.

PublishedIDVulnerabilitySeverityFixed in
2026-10-27 WPSEC-2026-1751 Co-Authors, Multiple Authors and Guest Authors in an Author Box with PublishPress Authors <= 4.17.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Authors List 'layout' Shortcode Attribute Medium 6.4 4.18.0
2026-10-27 WPSEC-2026-1750 Co-Authors, Multiple Authors and Guest Authors in an Author Box with PublishPress Authors <= 4.17.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Author Data Shortcode 'separator' Attribute Medium 6.4 4.18.0
2026-10-27 WPSEC-2026-1749 Co-Authors, Multiple Authors and Guest Authors in an Author Box with PublishPress Authors <= 4.17.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Genesis Post Author Shortcode 'before' and 'after' Attributes Medium 6.4 4.18.0
2026-10-27 WPSEC-2026-1748 Co-Authors, Multiple Authors and Guest Authors in an Author Box with PublishPress Authors <= 4.17.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Author Display Name Medium 6.4 4.18.0

License: CC BY 4.0