Vendor

    Black and White

    5 known vulnerabilities in products by Black and White, 0 of them actively exploited (CISA KEV).

    Key figures

    5

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    1

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in Black and White
    CriticalCVE-2025-25167

    WordPress BookPress – For Book Authors Plugin <= 1.2.7 - Broken Access Control vulnerability

    		8.2
    MediumCVE-2024-13362

    Freemius <= 2.10.1 - Reflected DOM-Based Cross-Site Scripting via url Parameter

    also in 75 other products

    		6.1
    MediumCVE-2022-4974

    Freemius SDK <= 2.4.2 - Missing Authorization Checks

    also in 151 other products

    		6.3
    HighCVE-2025-25168

    WordPress BookPress – For Book Authors Plugin <= 1.2.7 - CSRF to Stored XSS vulnerability

    		7.1
    MediumCVE-2023-23863

    Black and White Digital TreePress: Cross-site Scripting

    		5.9