ThemeRuby Multi Authors – Assign Multiple Writers to Posts
ThemeRuby Multi Authors – Assign Multiple Writers to Posts has one disclosed vulnerability in the WordSec catalog, all reported in 2026; it is fixed as of September 2026. Their average CVSS score is 6.4, and the most serious one scores 6.4 out of 10.
The most common weakness is Cross-Site Scripting, behind 1 of the records (100%).
The one issue recorded for ThemeRuby Multi Authors – Assign Multiple Writers to Posts has a vendor fix available, so running the current release closes it.
All of these findings were reported by zaim. ThemeRuby Multi Authors – Assign Multiple Writers to Posts is installed on roughly 2,000 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 7.0.4.
CVE-2026-1097ThemeRuby Multi Authors <= 1.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'before' and 'after' Shortcode Attributes
Read the full analysisVulnerability Records
ThemeRuby Multi Authors – Assign Multiple Writers to Posts
Author
ThemeRuby
ThemeRuby Multi Authors is a plugin that enables assigning multiple writers to posts and custom post types. Perfect for collaborative blogging, editorial teams, and news websites. It is specifically designed for news sites, magazines, agencies, and content teams who need flexible author attribution with zero performance impact. SEO-optimized and featuring an easy-to-use editor panel. 🎯 Why Choose ThemeRuby Multi Authors? Powerful Features * Unlimited Authors: Assign as many writers as needed per post. * Author Page: Automatically filters to show all multi-author posts. * Custom Post Types: Enable multi-authors for any post type. * Ready Shortcodes: Display authors anywhere with flexible shortcodes. * Author Box: Beautiful author bio boxes in single post. SEO Optimized & Fast Performance * Popular SEO Plugins: Full compatibility with major SEO plugin schema systems. * Optimized Queries: Efficient database lookups. * Built-in Caching: Smart caching reduces load. Developer Friendly * Clean Public API: Simple functions: tmauthors_get_post_authors(), tmauthors_the_authors(). * WP_Query Compatible: Works seamlessly with author, author_name, author__in parameters. Key Features Multi-Author Management * Unlimited co-authors per post. * Search and select from all site users. * Works with custom post types. * Author archives show all posts (primary + co-authored). * GDPR compliant. Display & Shortcodes * [tmauthors] – Display author names with links. * [tmauthors_box] – Full author box with avatars and bios. * [tmauthors_count] – Show number of authors. * [tmauthors_list] – Authors as formatted list. * [tmauthors_avatars] – Author avatars only. Developer Friendly * Clean API: tmauthors_get_post_authors(), tmauthors_the_authors(). * WP_Query compatible: author, author__in, author_name parameters. * Extensive hooks and filters. For Developers The plugin provides a complete developer toolkit. For further details, please refer to the documentation. Documentation Shortcode Usage Display authors anywhere using flexible shortcodes: Basic usage: [tmauthors] With custom separator: [tmauthors separator=” & ” before=”By “] Author box: [tmauthors_box show_avatar=”true” avatar_size=”120″] All options: [tmauthors post_id=”123″ separator=”, ” link=”true” before=”By ” after=””] [tmauthors_box post_id=”123″ show_avatar=”true” show_bio=”true” avatar_size=”120″] Available shortcodes: [tmauthors], [tmauthors_box], [tmauthors_count], [tmauthors_list], [tmauthors_avatars]. 🔗 Useful Links Documentation. ThemeRuby Website. Support Forum.
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C