Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

8 records

Vendor: motovnet Component: Ebook Store Clear all filters
TI-2025-07420 CVE-2025-8113 · GHSA-wpqf-xvqm-p9f4

Ebook Store < 5.8015 - Reflected XSS via $_SERVER['REQUEST_URI']

Priority MEDIUM 60

The Ebook Store WordPress plugin before 5.8015 does not escape the $_SERVER['REQUEST_URI'] parameter before outputting it back in an attribute, which could lead to Reflected Cross-Site Scripting in old web browsers.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00242 Published 2025-08-16 Fixed in 5.8015 CWE-79
TI-2024-11373 CVE-2024-12262 · GHSA-76rr-67g4-c4h2

Ebook Store <= 5.8001 - Reflected Cross-Site Scripting via 'step'

Priority LOW 28

The Ebook Store plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'step' parameter in all versions up to, and including, 5.8001 due to insufficient input sanitization and output escaping.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00451 Published 2024-12-21 No fix listed CWE-79
TI-2024-10457 CVE-2024-11287 · GHSA-r8qh-4869-cc7q

Ebook Store <= 5.8001 - Reflected Cross-Site Scripting

Priority LOW 27

The Ebook Store plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of add_query_arg without appropriate escaping on the URL in all versions up to, and including, 5.8001.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00364 Published 2024-12-21 No fix listed CWE-79
TI-2023-08876 CVE-2023-22701 · GHSA-w925-jm2w-6qhw

WordPress Ebook Store plugin <= 5.775 - Broken Authentication vulnerability

Priority MEDIUM 50

Missing Authorization vulnerability in Shopfiles Ltd Ebook Store allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Ebook Store: from n/a through 5.775.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01023 Published 2024-12-09 No fix listed CWE-862
TI-2024-06089 CVE-2024-6567 · GHSA-xwpx-xxx9-g4xw

Ebook Store <= 5.8001 - Unauthenticated Full Path Disclosure

Priority LOW 30

The Ebook Store plugin for WordPress is vulnerable to Full Path Disclosure in all versions up to, and including, 5.8001.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00448 Published 2024-08-02 No fix listed CWE-200
TI-2024-15543 CVE-2024-23501 · GHSA-4926-px5g-wrp7

WordPress Ebook Store Plugin <= 5.788 is vulnerable to Cross Site Scripting (XSS)

Priority LOW 26

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Shopfiles Ltd Ebook Store allows Stored XSS.This issue affects Ebook Store: from n/a through 5.788.

CVSS 3.1MEDIUM 5.9 Network High privileges User interaction EPSS 0.00336 Published 2024-02-29 No fix listed CWE-79