CVE-2025-25168

Cross-Site Request Forgery CSRF vulnerability in Black and White BookPress – For Book Authors book-press allows Cross-Site Scripting XSS.This issue affects BookPress – For Book Authors: from n/a through = 1.2.7...

CVE-2025-25168 WordPress BookPress – For Book Authors Plugin <= 1.2.7 - CSRF to Stored XSS vulnerability

Cross-Site Request Forgery CSRF vulnerability in blackandwhitedigital BookPress – For Book Authors allows Cross-Site Scripting XSS. This issue affects BookPress – For Book Authors: from n/a through 1.2.7...

CVE-2025-25168 WordPress BookPress – For Book Authors Plugin <= 1.2.7 - CSRF to Stored XSS vulnerability

Cross-Site Request Forgery CSRF vulnerability in Black and White BookPress – For Book Authors book-press allows Cross-Site Scripting XSS.This issue affects BookPress – For Book Authors: from n/a through = 1.2.7...

CVE-2025-25168

CVE-2025-25168: CSRF to Stored XSS in BookPress – For Book Authors (WordPress plugin) affecting versions up to 1.2.7. The initial description states CSRF enables XSS, but does not provide specific exploit details. Connected documents (Wordfence, NVD, Patchstack) indicate patch status as Unpatched...