CVE-2026-39746

Unauthenticated SQL Injection in Booknetic = 4.8.5 versions...

CVE-2026-39746 WordPress Booknetic plugin <= 4.8.5 - SQL Injection vulnerability

Unauthenticated SQL Injection in Booknetic = 4.8.5 versions...

CVE-2026-39746 WordPress Booknetic plugin <= 4.8.5 - SQL Injection vulnerability

Unauthenticated SQL Injection in Booknetic = 4.8.5 versions...

EUVD-2026-93255

Unauthenticated SQL Injection in Booknetic = 4.8.5 versions...

CVE-2026-39746

The Booknetic plugin for WordPress (versions

CVE-2026-39746: Improper Neutralization of Special Elements used in an SQL Command

Unauthenticated SQL Injection in Booknetic = 4.8.5 versions...

PT-2026-106420

Name of the Vulnerable Software and Affected Versions Booknetic versions prior to 4.8.6 Description An unauthenticated SQL Injection exists in the software. SQL Injection is a type of vulnerability that allows an attacker to interfere with the queries that an application makes to its database,...

WordPress Booknetic plugin <= 4.8.5 - SQL Injection vulnerability

SQL Injection vulnerability discovered by Bonds in WordPress Plugin Booknetic versions = 4.8.5...

EUVD-2026-37666

Unauthenticated Broken Authentication in Booknetic = 4.8.5 versions...

CVE-2026-25439

Unauthenticated Broken Authentication in Booknetic = 4.8.5 versions...

CVE-2026-25439

CVE-2026-25439 affects the WordPress Booknetic plugin up to version 4.8.5, with unauthenticated broken authentication leading to account takeover. The CVSSv3.1 vector (AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H) yields a base score of 8.1 (HIGH). Documented impact includes high confidentiality, integrit...

CVE-2026-25439 WordPress Booknetic plugin <= 4.8.5 - Account Takeover vulnerability

Unauthenticated Broken Authentication in Booknetic = 4.8.5 versions...

CVE-2026-25439 WordPress Booknetic plugin <= 4.8.5 - Account Takeover vulnerability

Unauthenticated Broken Authentication in Booknetic = 4.8.5 versions...

CVE-2026-25439: Authentication Bypass Using an Alternate Path or Channel

Unauthenticated Broken Authentication in Booknetic = 4.8.5 versions...

WordPress Booknetic plugin <= 4.8.5 - Account Takeover vulnerability

Account Takeover vulnerability discovered by Phat RiO in WordPress Plugin Booknetic versions = 4.8.5...

EUVD-2025-5400

Malicious code in bioql PyPI...

EUVD-2025-8106

Malicious code in bioql PyPI...

CVE-2024-13146

The Booknetic WordPress plugin before 4.1.5 does not have CSRF check when creating Staff accounts, which could allow attackers to make logged in admin add arbitrary Staff members via a CSRF attack...

WordPress Booknetic plugin < 4.1.5 - Staff Creation via CSRF vulnerability

Staff Creation via CSRF vulnerability discovered by Veshraj Ghimire in WordPress Plugin Booknetic versions 4.1.5...

CVE-2024-13146

The Booknetic WordPress plugin before 4.1.5 does not have CSRF check when creating Staff accounts, which could allow attackers to make logged in admin add arbitrary Staff members via a CSRF attack...