Login Request a demo
AA
Product
Author Avatars List/Block
by Paul Bearne · last CVE Apr 8, 2026
3
CVEs
0
On KEV
6.5
Max CVSS
0
New 30D
Vulnerabilities3In the news0Timeline
Severity mix
Critical 0High 0Medium 3Low 0
Severity
All severities3Critical0High0Medium3Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Author Avatars List/Block to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2025-22804
6.5
0%
Jan 9
WordPress Author Avatars List/Block plugin <= 2.1.23 - Stored Cross Site Scripting (XSS) vulnerability
Affected: through 2.1.23
CVE-2024-47370
6.5
0%
Oct 5
WordPress Author Avatars List/Block plugin <= 2.1.21 - Cross Site Scripting (XSS) vulnerability
Affected: through 2.1.21
CVE-2026-39690
5.3
0%
Apr 8
WordPress Author Avatars List/Block plugin <= 2.1.25 - Broken Access Control vulnerability
Affected: through 2.1.25
Showing 3