Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Vendor: Booknetic Clear all filters
TI-2026-67945 CVE-2026-39746 · GHSA-36mp-hvvf-qhq2

Blind SQL injection in WordPress Booknetic plugin

Priority MEDIUM 46

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Booknetic Booknetic booknetic allows Blind SQL Injection.This issue affects Booknetic: from n/a before 5.10.4.

CVSS 3.1CRITICAL 9.3 Network No auth No interaction EPSS 0.00372 Published 2026-10-06 Fixed in 5.10.4 CWE-89
TI-2026-20553 CVE-2026-25439 · GHSA-wp3q-p67p-p473

WordPress Booknetic plugin < 5.10.4 - Broken Authentication vulnerability

Priority LOW 37

Authentication Bypass Using an Alternate Path or Channel vulnerability in Booknetic Booknetic booknetic allows Authentication Abuse.This issue affects Booknetic: from n/a before 5.10.4.

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.00342 Published 2026-06-17 Fixed in 5.10.4 CWE-288