CVE-2025-31887 — WordPress MyBookProgress plugin <= 1.0.8 - Broken Access Control vulnerability

CVE-2025-31887

WordPress MyBookProgress plugin <= 1.0.8 - Broken Access Control vulnerability PUBLISHED

Description (CNA)

Missing Authorization vulnerability in zookatron MyBookProgress by Stormhill Media mybookprogress allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects MyBookProgress by Stormhill Media: from n/a through <= 1.0.8.

Affected (CNA)

Vendor / product	Versions
zookatron / MyBookProgress by Stormhill Media	affected 0 through 1.0.8

CWE

CWE-862

References

https://patchstack.com/database/Wordpress/Plugin/mybookprogress/vulnerability/wordpress-mybookprogress-plugin-1-0-8-broken-access-control-vulnerability?_s_id=cve

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.