CVE-2026-65452

MediumCVSS 5.3

Published: 23/07/2026(UTC)Updated: 24/10/2026(UTC)Translated: 25/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.31%

23th percentile - higher than 23% of all known CVEs

Summary

The Ebook Store plugin version 6.19 and earlier is vulnerable to unauthenticated Broken Access Control. An unauthenticated attacker can access administrative functions.

Risk Assessment

An attacker can change store settings, add or remove products, and access customer data.

Recommendation

Immediately update the Ebook Store plugin to the latest version and implement proper access controls.

Other vulnerabilities in Ebook Store

See all

CVE-2026-59529High
The Ebook Store plugin version 6.19 and earlier does not require authentication to expose sensitive data. An attacker can remotely read confidential information without having an account.
CVE-2026-65453Medium
The Ebook Store plugin version 6.19 and earlier is vulnerable to unauthenticated Broken Access Control. An unauthenticated attacker can access administrative functions.

Original NVD description (English source)

Unauthenticated Broken Access Control in Ebook Store <= 6.19 versions.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS