PatchTheCVE: wp post authorhttps://patchthecve.com/CVEs with upgrade or downgrade fix stepsCVE-2024-56247: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in AF themehttps://patchthecve.com/cve/CVE-2024-56247.htmlhttps://patchthecve.com/cve/CVE-2024-56247.htmlWed, 17 Jun 2026 08:11:55 +0000HIGH 7.6: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in AF themes WP Post Author wp-post-author allows SQL Injection.This issue affects WP Post Author: from n/a through <= 3.8.2.CVE-2024-37101: Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Ahttps://patchthecve.com/cve/CVE-2024-37101.htmlhttps://patchthecve.com/cve/CVE-2024-37101.htmlWed, 17 Jun 2026 07:37:45 +0000MEDIUM 6.5: Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in AF themes WP Post Author allows Stored XSS.This issue affects WP Post Author: from n/a through 3.6.7.CVE-2024-34389: Missing Authorization vulnerability in AF themes WP Post Author.This issue affects WP Post Author: from n/a thhttps://patchthecve.com/cve/CVE-2024-34389.htmlhttps://patchthecve.com/cve/CVE-2024-34389.htmlWed, 17 Jun 2026 07:33:18 +0000MEDIUM 4.3: Missing Authorization vulnerability in AF themes WP Post Author.This issue affects WP Post Author: from n/a through 3.6.4.CVE-2024-34387: Missing Authorization vulnerability in AF themes WP Post Author.This issue affects WP Post Author: from n/a thhttps://patchthecve.com/cve/CVE-2024-34387.htmlhttps://patchthecve.com/cve/CVE-2024-34387.htmlWed, 17 Jun 2026 07:33:17 +0000MEDIUM 4.3: Missing Authorization vulnerability in AF themes WP Post Author.This issue affects WP Post Author: from n/a through 3.6.4.