Vulnerabilities and security researches forauthorsy authorsy

Oct 12, 2025

CVE, Research URL: CVE-2025-27006
Home page URL: Security reports for WP Author box, Bio link and Post Rating – Authorsy
Application: WP Author box, Bio link and Post Rating – Authorsy
Date: Sep 26, 2025
Research Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in themeplugs Authorsy allows Stored XSS. This issue affects Authorsy: from n/a through 1.0.5.
Affected versions: max 1.0.6.
Status: vulnerable

Feb 27, 2026

CVE, Research URL: CVE-2026-24950
Home page URL: Security reports for WP Author box, Bio link and Post Rating – Authorsy
Application: WP Author box, Bio link and Post Rating – Authorsy
Date: Feb 20, 2026
Research Description: Authorization Bypass Through User-Controlled Key vulnerability in themeplugs Authorsy authorsy allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Authorsy: from n/a through <= 1.0.6.
Affected versions: max 1.0.6.
Status: vulnerable