https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2025-8113.htmlhttps://patchthecve.com/cve/CVE-2025-8113.htmlWed, 17 Jun 2026 10:06:19 +0000MEDIUM 6.1: The Ebook Store WordPress plugin before 5.8015 does not escape the $_SERVER['REQUEST_URI'] parameter before outputting it back in an attribute, which could lead to Reflected Cross-Site Scripting in old web browsers.https://patchthecve.com/cve/CVE-2023-22701.htmlhttps://patchthecve.com/cve/CVE-2023-22701.htmlWed, 17 Jun 2026 05:35:59 +0000HIGH 7.5: Missing Authorization vulnerability in Shopfiles Ltd Ebook Store allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Ebook Store: from n/a through 5.775.https://patchthecve.com/cve/CVE-2024-6567.htmlhttps://patchthecve.com/cve/CVE-2024-6567.htmlWed, 17 Jun 2026 08:18:15 +0000MEDIUM 5.3: The Ebook Store plugin for WordPress is vulnerable to Full Path Disclosure in all versions up to, and including, 5.8001. This is due to the plugin utilizing fpdi-protection and not preventing direct access to test files that have display_errors set to true. This makes it possible for unauthenticatedhttps://patchthecve.com/cve/CVE-2024-23501.htmlhttps://patchthecve.com/cve/CVE-2024-23501.htmlWed, 17 Jun 2026 07:13:04 +0000MEDIUM 5.9: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Shopfiles Ltd Ebook Store allows Stored XSS.This issue affects Ebook Store: from n/a through 5.788.