Black and White
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| BookPress – For Book Authors | 2 | – | Feb 7, 2025 |
| AgendaPress – Easily Publish Meeting Agendas and Programs on WordPress | 1 | – | Nov 19, 2024 |
| WP Genealogy – Your Family History Website | 1 | – | Apr 4, 2025 |
Exploited and recent CVEs
- CVE-2025-32252 WordPress WP Genealogy plugin <= 0.1.9 - Broken Access Control vulnerability 0.5%
- CVE-2025-25167 WordPress BookPress – For Book Authors Plugin <= 1.2.7 - Broken Access Control vulnerability 0.5%
- CVE-2025-25168 WordPress BookPress – For Book Authors Plugin <= 1.2.7 - CSRF to Stored XSS vulnerability 0.1%
- CVE-2024-51807 WordPress AgendaPress plugin <= 1.0.8 - Stored Cross Site Scripting (XSS) vulnerability 0.4%