Skip to content
OpenAdvisories
High · 8.2 CVE-2025-25167 EUVD-2025-4070GHSA-59vj-grh4-hp2j

WordPress BookPress – For Book Authors Plugin <= 1.2.7 - Broken Access Control vulnerability

Published Feb 7, 2025 · Updated Apr 28, 2026 · Assigned by Patchstack

Description

Missing Authorization vulnerability in Black and White BookPress – For Book Authors book-press allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects BookPress – For Book Authors: from n/a through <= 1.2.7.

Affected products

VendorProductAffectedFixed
Black and White BookPress – For Book Authors ≤ 1.2.7 —

References