High 8.2 Unfixed Closed
2025-02-07≤ 1.2.7
CVE-2025-25167
CVE-2025-25167
CVE-2025-25168
Freemius SDK <= 2.4.2 - Missing Authorization Checks
WordPress BookPress – For Book Authors Plugin <= 1.2.4 is vulnerable to Cross Site Scripting (XSS)
Freemius SDK <= 2.4.2 - Missing Authorization Checks
WordPress BookPress – For Book Authors plugin < 1.2.3 - Sensitive Information Disclosure vulnerability
WordPress BookPress – For Book Authors plugin < 1.2.3 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability