534 matches found
Wordpress Zedna eBook download <1.2 - Local File Inclusion
Wordpress Zedna eBook download prior to version 1.2 was affected by a filedownload.php local file inclusion vulnerability. id: CVE-2016-10924 info: name: Wordpress Zedna eBook download 1.2 - Local File Inclusion author: idealphase severity: high description: | Wordpress Zedna eBook download prior...
CVE-2026-59529
Unauthenticated Sensitive Data Exposure in Ebook Store = 6.19 versions...
EUVD-2026-49205
Unauthenticated Sensitive Data Exposure in Ebook Store = 6.19 versions...
CVE-2026-59529
The CVE-2026-59529 entry concerns the WordPress Ebook Store plugin versions ≤ 6.19 with an unauthenticated sensitive data exposure vulnerability. Provided details indicate an external attacker can access sensitive data without authentication (CVSS v3.1: 7.5 HIGH, AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A...
CVE-2026-59529 WordPress Ebook Store plugin <= 6.19 - Sensitive Data Exposure vulnerability
Unauthenticated Sensitive Data Exposure in Ebook Store = 6.19 versions...
CVE-2026-59529
Unauthenticated Sensitive Data Exposure in Ebook Store = 6.19 versions...
EUVD-2026-48218
Unauthenticated Broken Access Control in Ebook Store = 6.19 versions...
EUVD-2026-48217
Unauthenticated Broken Access Control in Ebook Store = 6.19 versions...
CVE-2026-65453
Affected product: WordPress Ebook Store plugin, versions up to 6.19. The issue is an unauthenticated Broken Access Control vulnerability in Ebook Store
CVE-2026-65452
CVE-2026-65452 affects the WordPress Ebook Store plugin up to version 6.19, with an Unauthenticated Broken Access Control vulnerability. The description in both records confirms unauthenticated access issues that impact access control, but no technical exploit steps, root cause specifics, or reme...
WordPress Ebook Store plugin <= 6.19 - Sensitive Data Exposure vulnerability
Sensitive Data Exposure vulnerability discovered by hivesec in WordPress Plugin Ebook Store versions = 6.19...
[SECURITY] Fedora 43 Update: calibre-9.11.0-1.fc43
Calibre is meant to be a complete e-library solution. It includes library management, format conversion, news feeds to ebook conversion as well as e-book reader sync features. Calibre is primarily a ebook cataloging program. It manages your ebook collection for you. It is designed around the...
CVE-2026-53511
calibre is an e-book manager. Prior to 9.10.0, a malicious EPUB, OPF, or PDF file can execute arbitrary Python code when its metadata is read by calibre, including through Add books or Edit books, by embedding a custom column definition with a python: template in calibre:usermetadata that is pass...
[SECURITY] Fedora 44 Update: calibre-9.6.0-1.fc44
Calibre is meant to be a complete e-library solution. It includes library management, format conversion, news feeds to ebook conversion as well as e-book reader sync features. Calibre is primarily a ebook cataloging program. It manages your ebook collection for you. It is designed around the...
[SECURITY] Fedora 43 Update: calibre-9.6.0-1.fc43
Calibre is meant to be a complete e-library solution. It includes library management, format conversion, news feeds to ebook conversion as well as e-book reader sync features. Calibre is primarily a ebook cataloging program. It manages your ebook collection for you. It is designed around the...
UBUNTU-CVE-2026-33206
calibre is a cross-platform e-book manager for viewing, converting, editing, and cataloging e-books. Prior to version 9.6.0, a path traversal vulnerability exists in Calibre' handling of images in Markdown and other similar text-based files allowing an attacker to include arbitrary files from the...
CVE-2026-33205 calibre has Server-Side Request Forgery in ebook viewer backend
calibre is a cross-platform e-book manager for viewing, converting, editing, and cataloging e-books. Prior to version 9.6.0, a Server-Side Request Forgery vulnerability in the background-image endpoint of calibre e-book reader's web view allows an attacker to perform blind GET requests to arbitra...
CVE-2026-33205
calibre is a cross-platform e-book manager for viewing, converting, editing, and cataloging e-books. Prior to version 9.6.0, a Server-Side Request Forgery vulnerability in the background-image endpoint of calibre e-book reader's web view allows an attacker to perform blind GET requests to arbitra...
CVE-2026-33205 calibre has Server-Side Request Forgery in ebook viewer backend
calibre is a cross-platform e-book manager for viewing, converting, editing, and cataloging e-books. Prior to version 9.6.0, a Server-Side Request Forgery vulnerability in the background-image endpoint of calibre e-book reader's web view allows an attacker to perform blind GET requests to arbitra...
CVE-2026-27824
calibre is a cross-platform e-book manager for viewing, converting, editing, and cataloging e-books. Prior to version 9.4.0, the calibre Content Server's brute-force protection mechanism uses a ban key derived from both remoteaddr and the X-Forwarded-For header. Since the X-Forwarded-For header i...