Shopfiles

Ebook Store

8 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
6.1

CVE-2025-8113

Exploit
  • EPSS 0.03%
  • Veröffentlicht 16.08.2025 06:00:05
  • Zuletzt bearbeitet 27.01.2026 19:30:12

The Ebook Store WordPress plugin before 5.8015 does not escape the $_SERVER['REQUEST_URI'] parameter before outputting it back in an attribute, which could lead to Reflected Cross-Site Scripting in old web browsers.

6.1

CVE-2024-12262

  • EPSS 0.73%
  • Veröffentlicht 21.12.2024 07:15:09
  • Zuletzt bearbeitet 24.02.2025 19:02:30

The Ebook Store plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'step' parameter in all versions up to, and including, 5.8001 due to insufficient input sanitization and output escaping. This makes it possible for unauthen...

6.1

CVE-2024-11287

  • EPSS 0.95%
  • Veröffentlicht 21.12.2024 07:15:08
  • Zuletzt bearbeitet 24.02.2025 19:01:49

The Ebook Store plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of add_query_arg without appropriate escaping on the URL in all versions up to, and including, 5.8001. This makes it possible for unauthenticated atta...

9.8

CVE-2023-22701

  • EPSS 0.41%
  • Veröffentlicht 09.12.2024 13:15:20
  • Zuletzt bearbeitet 07.11.2025 16:16:16

Missing Authorization vulnerability in Shopfiles Ltd Ebook Store allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Ebook Store: from n/a through 5.775.

5.3

CVE-2024-6567

  • EPSS 0.75%
  • Veröffentlicht 02.08.2024 02:15:47
  • Zuletzt bearbeitet 01.03.2025 02:14:17

The Ebook Store plugin for WordPress is vulnerable to Full Path Disclosure in all versions up to, and including, 5.8001. This is due to the plugin utilizing fpdi-protection and not preventing direct access to test files that have display_errors set t...

4.8

CVE-2024-23501

  • EPSS 0.06%
  • Veröffentlicht 29.02.2024 06:15:47
  • Zuletzt bearbeitet 16.01.2025 17:42:20

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Shopfiles Ltd Ebook Store allows Stored XSS.This issue affects Ebook Store: from n/a through 5.788.

6.1

CVE-2023-45602

  • EPSS 0.08%
  • Veröffentlicht 18.10.2023 14:15:09
  • Zuletzt bearbeitet 21.11.2024 08:27:02

Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Shopfiles Ltd Ebook Store plugin <= 5.785 versions.

4.8

CVE-2023-22690

  • EPSS 0.08%
  • Veröffentlicht 15.05.2023 11:15:08
  • Zuletzt bearbeitet 21.11.2024 07:45:13

Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Shopfiles Ltd Ebook Store plugin <= 5.775 versions.