Read the docs

owthub

Records4All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9

Exploited now

owthub records in CISA KEV

No owthub vulnerabilities are listed in CISA KEV.

Records

4 records

TI-2025-11649 CVE-2025-12707 · GHSA-9m78-cmhg-58g5

Library Management System <= 3.2.1 - Unauthenticated SQL Injection

Priority LOW 39

The Library Management System plugin for WordPress is vulnerable to SQL Injection via the 'bid' parameter in all versions up to, and including, 3.2.1 due to insufficient escaping on the user supplied parameter and lack o…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00492 Published 2026-02-19 No fix listed CWE-89
TI-2024-08050 CVE-2024-8679 · GHSA-4ghm-38q5-65rm

Library Management System <= 3.1 - Authenticated (Admin+) SQL Injection

Priority LOW 30

The Library Management System – Manage e-Digital Books Library plugin for WordPress is vulnerable to SQL Injection via the ‘value' parameter of the owt_lib_handler AJAX action in all versions up to, and including, 3.1 du…

CVSS 3.1MEDIUM 6.8 Network High privileges No interaction EPSS 0.00439 Published 2024-12-07 No fix listed CWE-89
TI-2024-11510 CVE-2024-12406 · GHSA-f5c6-995g-vxwg

Library Management System <= 3.2.0 - Authenticated (Subscriber+) SQL Injection

Priority LOW 29

The Library Management System – Manage e-Digital Books Library plugin for WordPress is vulnerable to SQL Injection via the 'owt7_borrow_books_id' parameter in all versions up to, and including, 3.2.0 due to insufficient…

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00416 Published 2024-12-12 No fix listed CWE-89
TI-2025-09453 CVE-2025-10303 · GHSA-7wrq-6f7w-chm4

Library Management System <= 3.1 - Missing Authorization to Authenticated (Subscriber+) Settings Manipulation

Priority LOW 20

The Library Management System plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the owt7_library_management_ajax_handler() function in all versions up to, and in…

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.0024 Published 2025-10-15 No fix listed CWE-862
Open these records in search →