Skip to content
Sign in
7.1 High

CVE-2025-25168 Cross-Site Request Forgery (CSRF) vulnerability in Black and White BookPress – For Book Authors book-press allows…

Description

Cross-Site Request Forgery (CSRF) vulnerability in Black and White BookPress – For Book Authors book-press allows Cross-Site Scripting (XSS).This issue affects BookPress – For Book Authors: from n/a through <= 1.2.7.

Affected products and versions

Product Affected versions Fixed in
BookPress – For Book Authors 1.2 earliest → 1.2.7 No fix stated
BookPress – For Book Authors 1.2 earliest → 1.2.7 No fix stated

Other CVEs of BookPress – For Book Authors

The 3 CVEs of BookPress – For Book Authors →
CVE-2025-25167 Missing Authorization vulnerability in Black and White BookPress – For Book Authors book-press allows Exploiting… 8.2 High CVE-2022-4974 The Freemius SDK, as used by hundreds of WordPress plugin and theme developers, was vulnerable to Cross-Site Request… 6.3 Medium
Track this CVE