Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

4 records

Vendor: owthub Clear all filters
TI-2025-11649 CVE-2025-12707 · GHSA-9m78-cmhg-58g5

Library Management System <= 3.2.1 - Unauthenticated SQL Injection

Priority LOW 39

The Library Management System plugin for WordPress is vulnerable to SQL Injection via the 'bid' parameter in all versions up to, and including, 3.2.1 due to insufficient escaping on the user supplied parameter and lack o…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00492 Published 2026-02-19 No fix listed CWE-89
TI-2025-09453 CVE-2025-10303 · GHSA-7wrq-6f7w-chm4

Library Management System <= 3.1 - Missing Authorization to Authenticated (Subscriber+) Settings Manipulation

Priority LOW 20

The Library Management System plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the owt7_library_management_ajax_handler() function in all versions up to, and in…

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.0024 Published 2025-10-15 No fix listed CWE-862
TI-2024-11510 CVE-2024-12406 · GHSA-f5c6-995g-vxwg

Library Management System <= 3.2.0 - Authenticated (Subscriber+) SQL Injection

Priority LOW 29

The Library Management System – Manage e-Digital Books Library plugin for WordPress is vulnerable to SQL Injection via the 'owt7_borrow_books_id' parameter in all versions up to, and including, 3.2.0 due to insufficient…

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00416 Published 2024-12-12 No fix listed CWE-89
TI-2024-08050 CVE-2024-8679 · GHSA-4ghm-38q5-65rm

Library Management System <= 3.1 - Authenticated (Admin+) SQL Injection

Priority LOW 30

The Library Management System – Manage e-Digital Books Library plugin for WordPress is vulnerable to SQL Injection via the ‘value' parameter of the owt_lib_handler AJAX action in all versions up to, and including, 3.1 du…

CVSS 3.1MEDIUM 6.8 Network High privileges No interaction EPSS 0.00439 Published 2024-12-07 No fix listed CWE-89