cleantalk
Vulnerabilities and Security Researches

Simple Author Box, PSC-2026-64639

PSC, Research URL

PSC-2026-64639

Application

Simple Author Box

Published on
Mar 30, 2026
Research Description
Author box plugins are security-relevant because they render user-controlled profile data across the site, often including author bio text, website links, and social profiles. If output encoding, access control, or request integrity is weak, these surfaces can become a path to stored XSS, unauthorized profile metadata exposure, or CSRF-driven settings changes. Simple Author Box version 2.59 has successfully completed the CleanTalk Plugin Security Certification process and received PSC-2026-64639, confirming that the plugin was reviewed from a secure code perspective with attention to the most common exploitation paths for author profile and bio display plugins.
Affected versions
Min 2.59, max 2.59.
Status
SAFE & CERTIFIED