Guest Author

Guest Author has 2 disclosed vulnerabilities in the WordSec catalog, all reported in 2023; all 2 are fixed as of September 2026. Their average CVSS score is 6.4, and the most serious one scores 6.4 out of 10. 2023 was the busiest year with 2 disclosures.

The most common weakness is Cross-Site Scripting, behind 2 of the records (100%).

Every one of the 2 issues recorded for Guest Author has a vendor fix available, so running the current release closes all known holes.

All of these findings were reported by emad. Guest Author is installed on roughly 5,000 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 7.1.

Strategic Overview

Avg CVSSMedium

6.4/ 10

Patch Coverage100%

Open

Fixed

Get automatic notifications for all Guest Author vulnerabilities before they are exploited.

Highest severity on recordCVSS 6.4CVE-2023-49747

Guest Author <= 2.3 - Authenticated (Author+) Stored Cross-Site Scripting

Read the full analysis

Vulnerability Records

2 records


2023-12-04 00:00	Guest Author <= 2.3 - Authenticated (Author+) Stored Cross-Site Scripting Guest Author <= 2.3	`CVE-2023-49747`	6.4 Medium	emad	Yes
2023-12-01 00:00	Guest Author <= 2.3 - Authenticated Stored Cross-Site Scripting Guest Author <= 2.3	`N/A`	6.4 Medium	Anonymous	Yes

Showing 1–2 of 2 reports

Plugin Profile

Latestv2.62

Guest Author

Author

WebFactory

4.2(13)

84/100

Last Updated

2026-08-16 (28d ago)

Active Installs

5,000+

Downloads

80,356

Requires WP

4.6+

Requires PHP

5.2.4+

Tested up to

WP 7.1

Created

2018-03-14 (9y ago)

Add a guest author to any post without needing to register the guest author as a user on your site. Features ✍️ Behaves as if guest authors were regular authors. 👤 Upload your own avatar image instead of using Gravatar. 🌍 Link to a custom page for the guest author. 🔥 Perfect for guest posts. Looking for nicer author boxes with more options? Check out our free Simple Author Box plugin.

View on WordPress.org