Ovatheme Bookpro vulnerabilities

• about envato bookpro WordPress BookPro plugin <= 1.1.0 - Insecure Direct Object References (IDOR) vulnerability CVE-2025-66123 5.3 MediumJune 26, 2026
• ovatheme bookpro WordPress BookPro plugin <= 1.1.0 - Arbitrary File Deletion vulnerability CVE-2026-27400 8.6 HighJune 17, 2026