SecvalisbySYSDEVOPS.EU
CVE Catalog
EnglishPolski

CVE-2026-39746

CriticalCVSS 9.3
Published: Updated: Translated: NVD NIST

Summary

The vulnerability allows an unauthenticated attacker to perform SQL injection in Booknetic up to version 4.8.5.

Risk Assessment

An attacker can execute unauthorized database queries, potentially leading to data leakage or database corruption.

Recommendation

Update the Booknetic plugin to the latest version that includes a fix for this vulnerability.

Other vulnerabilities in Booknetic

Original NVD description (English source)

Unauthenticated SQL Injection in Booknetic <= 4.8.5 versions.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS