wp-books-gallery vulnerabilities
CVEs whose affected-version data names the wp-books-gallery package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
2 CVEsRSS
CVE-2026-108487Medium· 6.5Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Hossni Mubarak Books Gallery wp-books-gallery allows Stored XSS.This issue affects Books Gallery: from n/a through 4.8.4.
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Hossni Mubarak Books Gallery wp-books-gallery allows Stored XSS.This issue affects Books Gallery: from n/a through 4.8.4.
▾ SunlitHossni Mubarak · wp-books-galleryEPSS 0.13%via NVD
CVE-2026-96822Critical· 9.3Unauthenticated SQL Injection in Books Gallery <= 4.8.3 versions.
Unauthenticated SQL Injection in Books Gallery <= 4.8.3 versions.
▾ MidnightHossni Mubarak · wp-books-galleryEPSS 0.28%via NVD