Cross-site Scripting Vulnerability in WP About Author Plugin by Jon Bishop

CVE-2025-27323

What is CVE-2025-27323?

A Cross-site Scripting (XSS) vulnerability has been identified in the WP About Author plugin developed by Jon Bishop. This flaw arises from improper neutralization of input during web page generation, allowing attackers to execute arbitrary JavaScript in a user's browser. This issue affects all versions of the plugin up to and including version 1.5, potentially compromising the security of WordPress sites using this plugin and leading to unauthorized actions on behalf of users. It is crucial for site administrators to promptly apply security updates or implement necessary mitigations to safeguard against potential exploits.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References