CBX Bookmark & Favorite

CBX Bookmark & Favorite has 6 disclosed vulnerabilities in the WordSec catalog, reported between 2021 and 2026; all 6 are fixed as of October 2026. Their average CVSS score is 6.5, and the most serious one scores 9.1 out of 10. Severity breakdown: 1 critical and 0 high. 2024 was the busiest year with 2 disclosures.

The most common weakness is Cross-Site Scripting, behind 3 of the records (50%). Other recurring categories include SQL Injection, Missing Authorization.

Every one of the 6 issues recorded for CBX Bookmark & Favorite has a vendor fix available, so running the current release closes all known holes.

6 independent researchers contributed these findings, one record each.

01234567891016.08.2021Today16.08.20216.1CBX Bookmark & Favorite <= 1.6.8 - Reflected Cross-Site Scripting CVSS 6.1 · 16.08.202127.12.20236.4CBX Bookmark & Favorite <= 1.7.13 - Authenticated (Contributor+) Stored Cross-Site Scripting CVSS 6.4 · 27.12.202312.04.20249.1CBX Bookmark & Favorite <= 1.7.20 - Authenticated (Administrator+) SQL Injection CVSS 9.1 · 12.04.202416.04.20246.4CBX Bookmark & Favorite <= 1.7.21 - Authenticated (Contributor+) Stored Cross-Site Scripting CVSS 6.4 · 16.04.202418.11.20254.3CBX Bookmark & Favorite <= 2.0.1 - Missing Authorization CVSS 4.3 · 18.11.202505.01.20266.5CBX Bookmark & Favorite <= 2.0.4 - Authenticated (Subscriber+) SQL Injection via `orderby` Parameter CVSS 6.5 · 05.01.2026

Strategic Overview

Avg CVSSMedium
6.5/ 10
Patch Coverage100%
Open

0

Fixed

6

Get automatic notifications for all CBX Bookmark & Favorite vulnerabilities before they are exploited.

Highest severity on recordCVSS 9.1CVE-2024-32132

CBX Bookmark & Favorite <= 1.7.20 - Authenticated (Administrator+) SQL Injection

Read the full analysis

Vulnerability Records

6 records
2026-01-05 15:12
CBX Bookmark & Favorite <= 2.0.4 - Authenticated (Subscriber+) SQL Injection via `orderby` Parameter
CBX Bookmark & Favorite
<= 2.0.4
CVE-2025-13652
6.5
Medium
Muhamad VisatYes
2025-11-18 00:00
CBX Bookmark & Favorite <= 2.0.1 - Missing Authorization
CBX Bookmark & Favorite
<= 2.0.1
CVE-2025-66101
4.3
Medium
Nabil IrawanYes
2024-04-16 00:00
CBX Bookmark & Favorite <= 1.7.21 - Authenticated (Contributor+) Stored Cross-Site Scripting
CBX Bookmark & Favorite
<= 1.7.21
CVE-2024-32577
6.4
Medium
LVT-tholv2kYes
2024-04-12 00:00
CBX Bookmark & Favorite <= 1.7.20 - Authenticated (Administrator+) SQL Injection
CBX Bookmark & Favorite
<= 1.7.20
CVE-2024-32132
9.1
Critical
Muhammad DaffaYes
2023-12-27 00:00
CBX Bookmark & Favorite <= 1.7.13 - Authenticated (Contributor+) Stored Cross-Site Scripting
CBX Bookmark & Favorite
<= 1.7.13
CVE-2023-51514
6.4
Medium
Ngô Thiên An (ancorn_)Yes
2021-08-16 00:00
CBX Bookmark & Favorite <= 1.6.8 - Reflected Cross-Site Scripting
CBX Bookmark & Favorite
<= 1.6.8
N/A
6.1
Medium
WPScanTeamYes
Showing 1–6 of 6 reports

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C