← WordPress Vulnerabilities
WordPress security by component

CBX Bookmark & Favorite

CBX Bookmark & Favorite is a WordPress component with 1 published CVE record in this archive. The latest tracked vulnerability was published Jan 06, 2026; the highest CVE/CNA score is 6.5.

Plugin slug: cbx-bookmark-favorite

CVE-2025-13652: CBX Bookmark & Favorite: SQL injection

CBX Bookmark & Favorite is affected by SQL injection. Exploitation requires at least subscriber-level access. A successful request can alter database queries and expose or modify WordPress data.

PublishedJan 06, 2026
Safe version guidanceSee mitigation notes
Safe version
Jan 06, 2026 CVE-2025-13652
CBX Bookmark & Favorite: SQL injection
CBX Bookmark & Favorite is affected by SQL injection. Exploitation requires at least subscriber-level access. A successful request can alter database queries and expose or modify WordPress data.
See mitigation notes
CVE6.5
NVDPending