WP Vulnerability WatchVulnerability data as of September 7, 2026

Known vulnerabilities in Ebook Store

Sell ebooks and digital downloads on WordPress. Upload, drop a shortcode, get paid with PayPal. Pro watermarks every PDF and ePub to its buyer.

16Reported vulnerabilities
9.8Highest CVSS score
6.21Latest version
700+Active installs

What to do now

Update Ebook Store to 6.20 or later. 16 of these have a fixed version available. Updating resolves them.

Plugin last updated: August 1, 2026 / Tested up to WordPress: 7.0.4 / View on wordpress.org

Reported vulnerabilities

Ordered by how urgently they need attention — whether a vulnerability is actually being exploited, and how likely exploitation is, rather than CVSS severity alone.

CVESeverityExploit probability
next 30 days		 Affected versionsFixed inPublished
CVE-2025-7437 Critical 9.8 1.3% 0 to 5.8012 (inclusive) 5.8013 July 24, 2025
CVE-2025-8113 Medium 6.1 0.2% Before 5.8015 5.8015 August 16, 2025
CVE-2023-22701 Medium 6.5 1.0% 5.775 and earlier 5.78 April 19, 2023
CVE-2025-47589 Medium 6.4 0.2% 5.8009 and earlier 5.8010 May 7, 2025
CVE-2024-12262 Medium 6.1 0.4% 5.8001 and earlier 5.8002 December 21, 2024
CVE-2024-11287 Medium 6.1 0.4% 5.8001 and earlier 5.8002 December 21, 2024
CVE-2023-45602 Medium 6.1 0.3% 5.8009 and earlier 5.8010 October 9, 2023
CVE-2026-59529 Medium 5.3 0.3% 6.19 and earlier 6.20 July 23, 2026
CVE-2026-65453 Medium 5.3 0.3% 6.19 and earlier 6.20 July 22, 2026
CVE-2026-65452 Medium 5.3 0.3% 6.19 and earlier 6.20 July 22, 2026
CVE-2024-6567 Medium 5.3 0.4% 5.8001 and earlier 5.8002 August 2, 2024
CVE-2024-23501 Medium 4.4 0.3% 5.8001 and earlier 5.8002 March 1, 2024
CVE-2023-22690 Medium 4.4 0.4% Before 5.78 5.78 April 19, 2023
CVE-2025-54702 Medium 4.3 0.1% 5.8013 and earlier 5.8014 July 30, 2025
CVE-2025-7486 Medium 4.4 0.2% 0 to 5.8012 (inclusive) 5.8013 July 21, 2025
CVE-2025-49862 Medium 4.4 0.2% 5.8008 and earlier 5.8009 June 12, 2025

Sources: vulnerability records from NVD, exploitation from CISA KEV, exploit probability from EPSS. Affected versions come from CPE ranges or from the reporting CNA.