Read the docs

Booknetic

Records3All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9

Exploited now

Booknetic records in CISA KEV

No Booknetic vulnerabilities are listed in CISA KEV.

Records

3 records

TI-2026-67945 CVE-2026-39746 · GHSA-36mp-hvvf-qhq2

Blind SQL injection in WordPress Booknetic plugin

Priority MEDIUM 46

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Booknetic Booknetic booknetic allows Blind SQL Injection.This issue affects Booknetic: from n/a before 5.10.4.

CVSS 3.1CRITICAL 9.3 Network No auth No interaction EPSS 0.00372 Published 2026-10-06 Fixed in 5.10.4 CWE-89
TI-2026-20553 CVE-2026-25439 · GHSA-wp3q-p67p-p473

WordPress Booknetic plugin < 5.10.4 - Broken Authentication vulnerability

Priority LOW 37

Authentication Bypass Using an Alternate Path or Channel vulnerability in Booknetic Booknetic booknetic allows Authentication Abuse.This issue affects Booknetic: from n/a before 5.10.4.

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.00342 Published 2026-06-17 Fixed in 5.10.4 CWE-288
Open these records in search →