What is GHSA-9288-h947-8qw5?

GHSA-9288-h947-8qw5 is a security advisory published by GitHub Security Advisories with Low severity. The WP Post Author WordPress plugin before 4.2.0 does not restrict the integration settings it...

Which CVE IDs does GHSA-9288-h947-8qw5 cover?

GHSA-9288-h947-8qw5 covers the following CVE IDs: CVE-2026-108686. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-9288-h947-8qw5?

GHSA-9288-h947-8qw5 has a CVSS v3 base score of 3.7, published by GitHub Security Advisories.

GHSA-9288-h947-8qw5LowCVSS 3.7

The WP Post Author WordPress plugin before 4.2.0 does not restrict the integration settings it...

Vendor

GitHub Security Advisories

Published

October 29, 2026

Last Modified

October 29, 2026

🔗 CVE IDs covered (1)

CVE-2026-108686 →

📋 Description

The WP Post Author WordPress plugin before 4.2.0 does not restrict the integration settings it returns to visitors, allowing unauthenticated users to read the reCAPTCHA secret key when one has been saved.

🔗 References (3)

https://nvd.nist.gov/vuln/detail/CVE-2026-108686
https://wpscan.com/vulnerability/50b39d25-51dc-49b4-8480-6a6954af8209
https://github.com/advisories/GHSA-9288-h947-8qw5