ByteOS Network

CVE Vulnerability Details :

CVE-2026-65453

PUBLISHED

More Info Official Page

Assigner-Patchstack

Assigner Org ID-21595511-bba5-4825-b968-b78d1f9984a3

Published At-23 Jul, 2026 | 11:18

Updated At-23 Jul, 2026 | 11:18

▼CVE Numbering Authority (CNA)

WordPress Ebook Store plugin <= 6.19 - Broken Access Control vulnerability

Unauthenticated Broken Access Control in Ebook Store <= 6.19 versions.

Affected Products

Vendor

motov.net

Product

Ebook Store

Collection URL

https://wordpress.org/plugins

Package Name

ebook-store

Default Status

unaffected

Versions

Affected

From n/a through 6.19 (custom)
- -> unaffectedfrom6.20

Problem Types

Type	CWE ID	Description
CWE	CWE-862	CWE-862 Missing Authorization

Type: CWE

CWE ID: CWE-862

Description: CWE-862 Missing Authorization

Metrics

Version	Base score	Base severity	Vector
3.1	5.3	MEDIUM	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

Version: 3.1

Base score: 5.3

Base severity: MEDIUM

Vector:

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

Impacts

CAPEC ID	Description
CAPEC-180	CAPEC-180 Exploiting Incorrectly Configured Access Control Security Levels

CAPEC ID: CAPEC-180

Description: CAPEC-180 Exploiting Incorrectly Configured Access Control Security Levels

Solutions

Update the WordPress Ebook Store Plugin to the latest available version (at least 6.20).

Credits

finder

Nabil Irawan | Patchstack Bug Bounty Program

References

Hyperlink	Resource
https://patchstack.com/database/wordpress/plugin/ebook-store/vulnerability/wordpress-ebook-store-plugin-6-19-broken-access-control-vulnerability-2?_s_id=cve	vdb-entry

Hyperlink: https://patchstack.com/database/wordpress/plugin/ebook-store/vulnerability/wordpress-ebook-store-plugin-6-19-broken-access-control-vulnerability-2?_s_id=cve

Resource:

vdb-entry

Affected Products

Affected

Problem Types

Metrics

Metrics Other Info

Impacts

Solutions

Configurations

Workarounds

Exploits

Credits

Timeline

Replaced By

Rejected Reason

References