Skip to content
CVE PROGRAM SOURCE RECORD7.1 High

CVE-2026-108125

WordPress Post Author Authenticated SQLi

Description

Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in wp-post-author. This issue affects wp-post-author version 4.0.0 prior to 4.1.0.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

wp-post-author

Default version status: unaffected

  • 4.0.0 to < 4.1.0affected

References