Login Request a demo
ES
Product
Ebook Store
by Shopfiles · last CVE Aug 16, 2025
8
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities8In the news0Timeline
Severity mix
Critical 1High 0Medium 7Low 0
Severity
All severities8Critical1High0Medium7Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Ebook Store to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2023-22701
9.8
1%
Dec 9
Missing Authorization vulnerability in Shopfiles Ltd Ebook Store allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Ebook Store: from n/a…
Affected: through 5.775
CVE-2025-8113
6.1
0%
Aug 16
The Ebook Store WordPress plugin before 5.8015 does not escape the $_SERVER['REQUEST_URI'] parameter before outputting it back in an attribute, which could lead to Reflected…
Affected: before 5.8015
CVE-2024-12262
6.1
0%
Dec 21
Ebook Store <= 5.8001 - Reflected Cross-Site Scripting via 'step'
Affected: through 5.8001
CVE-2024-11287
6.1
0%
Dec 21
Ebook Store <= 5.8001 - Reflected Cross-Site Scripting
Affected: through 5.8001
CVE-2023-45602
6.1
0%
Oct 18
Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Shopfiles Ltd Ebook Store plugin <= 5.785 versions
Affected: through 5.785
CVE-2024-6567
5.3
0%
Aug 2
The Ebook Store plugin for WordPress is vulnerable to Full Path Disclosure in all versions up to, and including, 5.8001
Affected: through 5.8001
CVE-2024-23501
4.8
0%
Feb 29
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Shopfiles Ltd Ebook Store allows Stored XSS.This issue affects Ebook Store:…
Affected: before 5.8002
CVE-2023-22690
4.8
0%
May 15
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Shopfiles Ltd Ebook Store plugin <= 5.775 versions
Affected: through 5.775
Showing 8