CVE-2026-39668

MediumCVSS 5.3

Published: 08/04/2026(UTC)Updated: 24/07/2026(UTC)Translated: 25/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.23%

14th percentile - higher than 14% of all known CVEs

Summary

The Book Previewer for Woocommerce plugin contains a missing authorization vulnerability that allows exploiting incorrectly configured access control security levels. This issue affects all versions from n/a through 1.0.6.

Risk Assessment

Unauthorized users can access book preview functions or other protected resources, potentially leading to data leakage or content manipulation.

Recommendation

Immediately update the Book Previewer for Woocommerce plugin to the latest version and review access control settings.

Original NVD description (English source)

Missing Authorization vulnerability in g5theme Book Previewer for Woocommerce book-previewer-for-woocommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Book Previewer for Woocommerce: from n/a through <= 1.0.6.