CVE-2026-65452
MediumCVSS 5.3Summary
The Ebook Store plugin version 6.19 and earlier is vulnerable to unauthenticated Broken Access Control. An unauthenticated attacker can access administrative functions.
Risk Assessment
An attacker can change store settings, add or remove products, and access customer data.
Recommendation
Immediately update the Ebook Store plugin to the latest version and implement proper access controls.
Other vulnerabilities in Ebook Store
See all- CVE-2026-59529High
The Ebook Store plugin version 6.19 and earlier does not require authentication to expose sensitive data. An attacker can remotely read confidential information without having an account.
- CVE-2026-65453Medium
The Ebook Store plugin version 6.19 and earlier is vulnerable to unauthenticated Broken Access Control. An unauthenticated attacker can access administrative functions.
Original NVD description (English source)
Unauthenticated Broken Access Control in Ebook Store <= 6.19 versions.