CVE-2026-42708— WordPress WP Post Author plugin <= 4.0.0 - SQL Injection vulnerability

Quick assessment

Copy summary Copy citation

Affected

AF themes WP Post Author

Exploitation

No confirmed in-the-wild exploitation; assess based on exposure

Recommended action

Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

在 AF 主题的 WP Post Author 插件（wp-post-author）中，存在因对 SQL 命令中使用的特殊元素处理不当而导致的“SQL 注入”漏洞（具体为盲注型 SQL 注入）。该问题影响 WP Post Author 插件的以下版本：从初始版本到 4.0.0 版本。

CVE-2026-42708 affects AF themes WP Post Author. No confirmed in-the-wild exploitation; assess based on exposure. 在 AF 主题的 WP Post Author 插件（wp-post-author）中，存在因对 SQL 命令中使用的特殊元素处理不当而导致的“SQL 注入”漏洞（具体为盲注型 SQL 注入）。该问题影响 WP Post Author 插件的以下版本：从初始版本到 4.0.0 版本。 CVE-2026-42708 vulnerability details, Shenlong CVE Platform, https://cve.imfht.com/detail/CVE-2026-42708

I. Basic Information for CVE-2026-42708

Affected Products

II. Public POCs for CVE-2026-42708

III. Intelligence Information for CVE-2026-42708

Other References for CVE-2026-42708 (1)

• https://patchstack.com/database/wordpress/plugin/wp-post-author/vulnerability/wordpress-wp-post-author-plugin-4-0-0-sql-injection-vulnerability?_s_id=cve vdb-entry

• https://www.cve.org/CVERecord?id=CVE-2026-42708

IV. Related Vulnerabilities

V. Comments for CVE-2026-42708