CVE-2025-23452

CVE-2025-23452 is a reflected cross-site scripting (XSS) vulnerability in EditionGuard for WooCommerce – eBook Sales with DRM, affecting versions from n/a through 3.4.2. The issue arises from improper neutralization of input during web page generation. According to the CVSS 3.1 vector, it has a b...

WordPress EditionGuard for WooCommerce plugin <= 3.4.2 - Reflected Cross Site Scripting (XSS) vulnerability

Reflected Cross Site Scripting XSS vulnerability discovered by João Pedro Soares de Alcântara Kinorth in WordPress Plugin EditionGuard for WooCommerce – eBook Sales with DRM versions = 3.4.2...

CVE-2024-56207

Cross-Site Request Forgery CSRF vulnerability in EditionGuard EditionGuard for WooCommerce – eBook Sales with DRM editionguard-for-woocommerce-ebook-sales-with-drm allows Privilege Escalation.This issue affects EditionGuard for WooCommerce – eBook Sales with DRM: from n/a through = 3.4.2...

CVE-2024-56207 WordPress EditionGuard for WooCommerce – eBook Sales with DRM plugin <= 3.4.2 - CSRF to Privilege Escalation vulnerability

Cross-Site Request Forgery CSRF vulnerability in EditionGuard EditionGuard for WooCommerce – eBook Sales with DRM editionguard-for-woocommerce-ebook-sales-with-drm allows Privilege Escalation.This issue affects EditionGuard for WooCommerce – eBook Sales with DRM: from n/a through = 3.4.2...

CVE-2024-56207 WordPress EditionGuard for WooCommerce – eBook Sales with DRM plugin <= 3.4.2 - CSRF to Privilege Escalation vulnerability

Cross-Site Request Forgery CSRF vulnerability in EditionGuard EditionGuard for WooCommerce – eBook Sales with DRM editionguard-for-woocommerce-ebook-sales-with-drm allows Privilege Escalation.This issue affects EditionGuard for WooCommerce – eBook Sales with DRM: from n/a through = 3.4.2...

PT-2024-36742 · Unknown · Editionguard For Woocommerce

Name of the Vulnerable Software and Affected Versions: EditionGuard for WooCommerce – eBook Sales with DRM versions 3.4.2 and earlier Description: A Cross-Site Request Forgery CSRF vulnerability has been identified, allowing Privilege Escalation. This issue affects the EditionGuard for WooCommerc...

CVE-2024-12262

The Ebook Store plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'step' parameter in all versions up to, and including, 5.8001 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scrip...

CVE-2024-12262

The Ebook Store plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'step' parameter in all versions up to, and including, 5.8001 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scrip...

CVE-2024-11287

The Ebook Store plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of addqueryarg without appropriate escaping on the URL in all versions up to, and including, 5.8001. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages th...

CVE-2024-11287

The Ebook Store plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of addqueryarg without appropriate escaping on the URL in all versions up to, and including, 5.8001. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages th...

CVE-2024-12262 Ebook Store <= 5.8001 - Reflected Cross-Site Scripting via 'step'

The Ebook Store plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'step' parameter in all versions up to, and including, 5.8001 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scrip...

CVE-2024-12262

CVE-2024-12262 — Ebook Store (WordPress) vulnerability: Reflected Cross-Site Scripting via the step parameter in all versions up to 5.8001 due to insufficient input sanitization/escape. Exploitation requires user action (e.g., clicking a link) and unauthenticated access. CVSSv3.1 base 6.1 (Networ...

CVE-2024-12262 Ebook Store <= 5.8001 - Reflected Cross-Site Scripting via 'step'

The Ebook Store plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'step' parameter in all versions up to, and including, 5.8001 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scrip...

CVE-2024-11287 Ebook Store <= 5.8001 - Reflected Cross-Site Scripting

The Ebook Store plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of addqueryarg without appropriate escaping on the URL in all versions up to, and including, 5.8001. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages th...

CVE-2024-11287

CVE-2024-11287 – Ebook Store (WordPress) Reflected XSS Affected software: Ebook Store WordPress plugin, versions up to and including 5.8001. Root cause and impact: Reflected Cross-Site Scripting due to insufficient escaping when using add_query_arg on the URL, enabling unauthenticated attackers t...

CVE-2024-11287 Ebook Store <= 5.8001 - Reflected Cross-Site Scripting

The Ebook Store plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of addqueryarg without appropriate escaping on the URL in all versions up to, and including, 5.8001. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages th...

WordPress plugin Ebook Store 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

PT-2024-17516 · WordPress · Ebook Store

Name of the Vulnerable Software and Affected Versions: Ebook Store plugin for WordPress versions up to, and including, 5.8001 Description: The issue is related to Reflected Cross-Site Scripting via the step parameter due to insufficient input sanitization and output escaping. This allows...

PT-2024-16883 · WordPress · Ebook Store

Name of the Vulnerable Software and Affected Versions: Ebook Store plugin for WordPress versions up to, and including, 5.8001 Description: The issue is related to Reflected Cross-Site Scripting due to the use of add query arg without appropriate escaping on the URL. This allows unauthenticated...

WordPress plugin Ebook Store 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. WordPress plugin Ebook Stor...