Beta

Report

BookPress – For Book Authors <= 1.2.7 is vulnerable to Broken Access Control vulnerability

Unauthenticated
Published
2025-02-01

The BookPress – For Book Authors plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on a function in all versions up to, and including, 1.2.7. This makes it possible for unauthenticated attackers to perform an unauthorized action.

CVE

https://www.cve.org/CVERecord?id=CVE-2025-25167

CVSS

Score:8.2

Severity:High

Version: 1.2.7

The plugin vendor has not patched this vulnerability at the moment.