← All advisories

High severityNVD Advisory· Published Oct 9, 2026

CVE-2026-108125

CVE-2026-108125

Description

Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in wp-post-author.

This issue affects wp-post-author version 4.0.0 prior to 4.1.0.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

2

WordPress/Wp Post Authorinferred2 versions
>=4.0.0,<4.1.0+ 1 more
- (no CPE)range: >=4.0.0,<4.1.0
- (no CPE)range: <4.1.0
Package: https://wordpress.org/plugins/wp-post-author

Patches

Vulnerability mechanics

References

1

www.tenable.com/security/research/tra-2026-62nvd

News mentions

0

No linked articles in our index yet.