Medium · 5.3 CVE-2025-48119 EUVD-2025-15522GHSA-xhqg-qw3g-gfc2

WordPress RS WP Book Showcase plugin <= 6.7.59 - Content Injection vulnerability

Published May 16, 2025 · Updated Apr 28, 2026 · Assigned by Patchstack

Vendor: RS WP THEMES Product: RS WP Book Showcase

Description

Improper Control of Generation of Code ('Code Injection') vulnerability in RS WP THEMES RS WP Book Showcase rs-wp-books-showcase allows Code Injection.This issue affects RS WP Book Showcase: from n/a through <= 6.7.59.

Affected products

Vendor	Product	Affected	Fixed
RS WP THEMES	RS WP Book Showcase	≤ 6.7.59	—

References

https://patchstack.com/database/Wordpress/Plugin/rs-wp-books-showcase/vulnerability/wordpress-rs-wp-book-showcase-plugin-6-7-40-arbitrary-shortcode-execution-vulnerability?_s_id=cve vdb-entry