CVE-2026-59529
HighCVSS 7.5Summary
The Ebook Store plugin version 6.19 and earlier does not require authentication to expose sensitive data. An attacker can remotely read confidential information without having an account.
Risk Assessment
Risk of customer data leakage and privacy breach, potentially leading to financial losses and loss of trust.
Recommendation
Update the Ebook Store plugin to the latest available version that fixes this vulnerability.
Other vulnerabilities in Ebook Store
See all- CVE-2026-65453Medium
The Ebook Store plugin version 6.19 and earlier is vulnerable to unauthenticated Broken Access Control. An unauthenticated attacker can access administrative functions.
- CVE-2026-65452Medium
The Ebook Store plugin version 6.19 and earlier is vulnerable to unauthenticated Broken Access Control. An unauthenticated attacker can access administrative functions.
Original NVD description (English source)
Unauthenticated Sensitive Data Exposure in Ebook Store <= 6.19 versions.