WordPress plugin
Author Bio Shortcode security & vulnerabilities
Unpatched vulnerability in the latest version
At least one vulnerability affects the latest version and no fix has been released. Deactivate the plugin or restrict access to the affected feature until the vendor ships a patch.
- Critical0
- High0
- Medium1
- Low0
All Author Bio Shortcode vulnerabilities
| Severity | Vulnerability | CVE | Published |
|---|---|---|---|
| Medium6.4 | Authenticated (Contributor+) Stored Cross-Site Scripting ≤2.5.3No patch available | CVE-2025-31731 |
- Medium6.4Authenticated (Contributor+) Stored Cross-Site Scripting
≤2.5.3No patch available
Author Bio Shortcode: common questions
Does Author Bio Shortcode have known vulnerabilities?
Yes. VulnCrest Radar lists 1 known vulnerability in Author Bio Shortcode: 1 medium. At least one is not fixed in the latest version.
How do I check which version of Author Bio Shortcode I run?
In wp-admin open Plugins → Installed Plugins; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.
What is the most recent Author Bio Shortcode vulnerability?
CVE-2025-31731, published Apr 1, 2025: Author Bio Shortcode <= 2.5.3 - Authenticated (Contributor+) Stored Cross-Site Scripting. Severity: Medium (CVSS 6.4).
Is any Author Bio Shortcode vulnerability listed in CISA KEV?
No. None of the known Author Bio Shortcode vulnerabilities is currently listed in the CISA KEV catalog.