Filtered by vendor Wpkube Subscriptions
Filtered by product Authors List Subscriptions
Total 2 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2024-10952 1 Wpkube 1 Authors List 2024-12-04 7.3 High
The The Authors List plugin for WordPress is vulnerable to arbitrary shortcode execution via update_authors_list_ajax AJAX action in all versions up to, and including, 2.0.4. This is due to the software allowing users to execute an action that does not properly validate a value before running do_shortcode. This makes it possible for unauthenticated attackers to execute arbitrary shortcodes.
CVE-2023-37981 1 Wpkube 1 Authors List 2024-11-21 7.1 High
Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in WPKube Authors List plugin <= 2.0.2 versions.