CVE-2025-11867 | Bg Book Publisher Plugin up to 1.25 on WordPress Shortcode book_author cross site scripting

October 22, 2025 Yanac

A vulnerability categorized as problematic has been discovered in Bg Book Publisher Plugin up to 1.25 on WordPress. Affected by this vulnerability is an unknown functionality of the component Shortcode Handler. The manipulation of the argument book_author results in cross site scripting.

This vulnerability is cataloged as CVE-2025-11867. The attack may be launched remotely. There is no exploit available.VulDB Recent EntriesRead More