CVE-2026-11977 | afthemes WP Post Author Plugin up to 3.9.1 on WordPress /wp-admin/edit.php wpma_metabox_authors_list sql injection

A vulnerability described as critical has been identified in afthemes WP Post Author Plugin up to 3.9.1 on WordPress. The impacted element is an unknown function of the file /wp-admin/edit.php. The manipulation of the argument wpma_metabox_authors_list results in sql injection.

This vulnerability was named CVE-2026-11977. The attack may be performed from remote. There is no available exploit.VulDB Recent EntriesRead More