Description
Unauthenticated Insecure Direct Object References (IDOR) in BookPro <= 1.1.0 versions.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| About Envato | BookPro | ≤ 1.1.0 | — |
Medium · 5.3
CVE-2025-66123
EUVD-2025-210356GHSA-j2gp-7857-qprf
WordPress BookPro plugin <= 1.1.0 - Insecure Direct Object References (IDOR) vulnerability
Published Jun 26, 2026 · Updated Jun 26, 2026 · Assigned by Patchstack