Booknetic vulnerabilities

Products

• Booknetic 3

Latest Booknetic CVEs

Newest publication first

1. CVE-2026-39746 WordPress Booknetic plugin < 5.10.3 - SQL Injection vulnerability

   Published 2026-10-06

   Critical·CVSS 9.3 EPSS 0.37%

   Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Booknetic Booknetic booknetic allows Blind SQL Injection.This issue affects Booknetic: from n/a before 5.10.3.

2. CVE-2026-25439 WordPress Booknetic plugin < 5.10.3 - Broken Authentication vulnerability

   Published 2026-06-17

   High·CVSS 8.1 EPSS 0.34%

   Authentication Bypass Using an Alternate Path or Channel vulnerability in Booknetic Booknetic booknetic allows Authentication Abuse.This issue affects Booknetic: from n/a before 5.10.3.

3. CVE-2025-26926 WordPress Booknetic plugin < 5.10.4 - Cross Site Request Forgery (CSRF) vulnerability

   Published 2025-02-25

   Medium·CVSS 4.3 EPSS 0.16%

   Cross-Site Request Forgery (CSRF) vulnerability in Booknetic Booknetic booknetic allows Cross Site Request Forgery.This issue affects Booknetic: from n/a before 5.10.4.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.