WordPress plugin
Ebook Store security & vulnerabilities
No known unpatched vulnerabilities in the latest version
All 16 known vulnerabilities are fixed in the latest release. If you run an older version, update to null or newer.
- Critical1
- High0
- Medium15
- Low0
All Ebook Store vulnerabilities
| Severity | Vulnerability | CVE | Published |
|---|---|---|---|
| Medium5.3 | Unauthenticated Information Exposure ≤6.19Update to 6.20 | CVE-2026-59529 | |
| Medium5.3 | Missing Authorization ≤6.19Update to 6.20 | CVE-2026-65453 | |
| Medium5.3 | Missing Authorization ≤6.19Update to 6.20 | CVE-2026-65452 | |
| Medium4.3 | Cross-Site Request Forgery ≤5.8013Update to 5.8014 | CVE-2025-54702 | |
| Medium6.1 | Reflected Cross-Site Scripting ≤5.8014Update to 5.8015 | CVE-2025-8113 | |
| Critical9.8 | Unauthenticated Arbitrary File Upload ≤5.8012Update to 5.8013 | CVE-2025-7437 | |
| Medium4.4 | Authenticated (Administrator+) Stored Cross-Site Scripting via Order Details ≤5.8012Update to 5.8013 | CVE-2025-7486 | |
| Medium4.4 | Authenticated (Administrator+) Stored Cross-Site Scripting ≤5.8008Update to 5.8009 | CVE-2025-49862 | |
| Medium6.4 | Authenticated (Contributor+) Stored Cross-Site Scripting ≤5.8009Update to 5.8010 | CVE-2025-47589 | |
| Medium6.1 | Reflected Cross-Site Scripting ≤5.8001Update to 5.8002 | CVE-2024-11287 | |
| Medium6.1 | Reflected Cross-Site Scripting via 'step' ≤5.8001Update to 5.8002 | CVE-2024-12262 | |
| Medium5.3 | Unauthenticated Full Path Disclosure ≤5.8001Update to 5.8002 | CVE-2024-6567 | |
| Medium4.4 | Authenticated (Administrator+) Stored Cross-Site Scripting ≤5.8001Update to 5.8002 | CVE-2024-23501 | |
| Medium6.1 | Reflected Cross-Site Scripting ≤5.8009Update to 5.8010 | CVE-2023-45602 | |
| Medium4.4 | Authenticated (Administrator+) Stored Cross-Site Scripting <5.78Update to 5.78 | CVE-2023-22690 | |
| Medium6.5 | Missing Authorization via ebook_store_export_orders ≤5.775Update to 5.78 | CVE-2023-22701 |
- Medium5.3Unauthenticated Information Exposure
≤6.19Update to 6.20
- Medium5.3Missing Authorization
≤6.19Update to 6.20
- Medium5.3Missing Authorization
≤6.19Update to 6.20
- Medium4.3Cross-Site Request Forgery
≤5.8013Update to 5.8014
- Medium6.1Reflected Cross-Site Scripting
≤5.8014Update to 5.8015
- Critical9.8Unauthenticated Arbitrary File Upload
≤5.8012Update to 5.8013
- Medium4.4Authenticated (Administrator+) Stored Cross-Site Scripting via Order Details
≤5.8012Update to 5.8013
- Medium4.4Authenticated (Administrator+) Stored Cross-Site Scripting
≤5.8008Update to 5.8009
- Medium6.4Authenticated (Contributor+) Stored Cross-Site Scripting
≤5.8009Update to 5.8010
- Medium6.1Reflected Cross-Site Scripting
≤5.8001Update to 5.8002
- Medium6.1Reflected Cross-Site Scripting via 'step'
≤5.8001Update to 5.8002
- Medium5.3Unauthenticated Full Path Disclosure
≤5.8001Update to 5.8002
- Medium4.4Authenticated (Administrator+) Stored Cross-Site Scripting
≤5.8001Update to 5.8002
- Medium6.1Reflected Cross-Site Scripting
≤5.8009Update to 5.8010
- Medium4.4Authenticated (Administrator+) Stored Cross-Site Scripting
<5.78Update to 5.78
- Medium6.5Missing Authorization via ebook_store_export_orders
≤5.775Update to 5.78
Ebook Store: common questions
Does Ebook Store have known vulnerabilities?
Yes. VulnCrest Radar lists 16 known vulnerabilities in Ebook Store: 1 critical, 15 medium. None are known to affect version null.
How do I check which version of Ebook Store I run?
In wp-admin open Plugins → Installed Plugins; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.
What is the most recent Ebook Store vulnerability?
CVE-2026-59529, published Jul 23, 2026: Ebook Store <= 6.19 - Unauthenticated Information Exposure. Severity: Medium (CVSS 5.3).
Is any Ebook Store vulnerability listed in CISA KEV?
No. None of the known Ebook Store vulnerabilities is currently listed in the CISA KEV catalog.