What is CVE-2025-12126?

CVE-2025-12126 is a medium-severity vulnerability in Ryanmoyer The Total Book Project, classified under Authorization Bypass Through User-Controlled Key. CVSS score: 5.4/10. Published 2025-11-11.

How severe is CVE-2025-12126?

Medium severity. CVSS v3 base score is 5.4 out of 10.

Auth bypass in Ryanmoyer The Total Book Project

CVE-2025-12126

The The Total Book Project plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 1.0 via several functions due to missing validation on a user controlled key. This makes it possible fo…

Vulnerability class: IDOR (Insecure Direct Object Reference)

EPSS: 0.002 (7.4th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 5.4 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N.

Affected products

Ryanmoyer The Total Book Project — versions 0

Weakness classification (CWE)

CWE-639 — Authorization Bypass Through User-Controlled Key

References

Frequently asked questions

What is CVE-2025-12126?: CVE-2025-12126 is a medium-severity vulnerability in Ryanmoyer The Total Book Project, classified under Authorization Bypass Through User-Controlled Key. CVSS score: 5.4/10. Published 2025-11-11.
How severe is CVE-2025-12126?: Medium severity. CVSS v3 base score is 5.4 out of 10.