Booknetic vulnerabilities

3 known CVE vulnerabilities in Booknetic, translated and rated.

CVE-2026-39746Critical
The Booknetic plugin is vulnerable to SQL Injection (improper neutralization of special elements in SQL commands), allowing an attacker to perform Blind SQL Injection. This issue affects versions before 5.10.3.
CVE-2026-25439High
The Booknetic plugin contains an Authentication Bypass Using an Alternate Path or Channel vulnerability, allowing authentication abuse. This issue affects versions before 5.10.3.
CVE-2025-26926Medium
The Booknetic plugin contains a Cross-Site Request Forgery (CSRF) vulnerability. This affects versions before 5.10.4.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS