Extension WordPress
Vulnérabilités MyBookTable Bookstore by Stormhill Media
Cette page rassemble les failles publiées pour MyBookTable Bookstore by Stormhill Media, leurs plages de versions affectées et les correctifs signalés dans la base locale.
Historique de sécurité
CVE et vulnérabilités de MyBookTable Bookstore by Stormhill Media
8 fiches
MyBookTable Bookstore <= 3.6.0 – Authenticated (Author+) Stored Cross-Site Scripting
The MyBookTable Bookstore plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to, and including, 3.6.0 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with author-level access and…
*-3.6.0
Non indiqué
01/02/2026
MyBookTable Bookstore <= 3.5.6 – Authenticated (Contributor+) Stored Cross-Site Scripting
The MyBookTable Bookstore plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to, and including, 3.5.6 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with contributor-level access and…
*-3.5.6
Non indiqué
31/12/2025
MyBookTable Bookstore <= 3.5.3 – Cross-Site Request Forgery
The MyBookTable Bookstore plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 3.5.3. This is due to missing or incorrect nonce validation on the mbt_add_admin_notices() function. This makes it possible for unauthenticated…
*-3.5.3
3.5.4
06/01/2025
MyBookTable Bookstore <= 3.4.0 – Cross-Site Request Forgery
The MyBookTable Bookstore plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 3.4.0. This is due to missing or incorrect nonce validation on several functions. This makes it possible for unauthenticated attackers…
*-3.4.0
3.5.0
12/08/2024
MyBookTable Bookstore <= 3.3.7 – Authenticated (Author+) Stored Cross-Site Scripting
The MyBookTable Bookstore plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SEO post data in versions up to, and including, 3.3.7 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers,…
*-3.3.7
3.3.8
25/03/2024
MyBookTable Bookstore <= 3.3.3 – Cross-Site Request Forgery
The MyBookTable Bookstore plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 3.3.3. This is due to missing or incorrect nonce validation on the mbt_api_key_refresh_ajax() function. This makes it possible for unauthenticated…
*-3.3.3
3.3.4
23/11/2023
MyBookTable Bookstore <= 3.2.2 – Reflected Cross-Site Scripting
The MyBookTable Bookstore plugin for WordPress is vulnerable to Reflected Cross-Site Scripting in versions up to, and including, 3.2.2 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web…
*-3.2.2
3.2.3
03/07/2019
MyBookTable Bookstore by Stormhill Media <= 2.1.4 – Cross-Site Scripting
The MyBookTable Bookstore by Stormhill Media plugin for WordPress is vulnerable to Cross-Site Scripting in versions up to, and including 2.1.4, due to insufficient input sanitization and output escaping in the shadowbox feature.
*-2.1.4
2.1.5
21/09/2015
Extensions également surveillés
WP Commander
Rechercher dans toute la base WordPress
Utilisez la recherche globale pour retrouver une extension, un thème, une CVE ou un identifiant de vulnérabilité.