CVE-2026-57643

Name of the Vulnerable Software and Affected Versions WP Post Author versions prior to 3.9.2

Description The WP Post Author plugin for WordPress contains a flaw where insufficient escaping of user-supplied parameters and lack of proper preparation of SQL queries allow authenticated attackers with contributor-level access or higher to perform SQL Injection. This allows the attacker to append additional SQL queries to existing ones to extract sensitive information from the database.

Recommendations Update to a version newer than 3.9.1.