27 matches found
EUVD-2026-37666
Unauthenticated Broken Authentication in Booknetic = 4.8.5 versions...
CVE-2026-25439
Unauthenticated Broken Authentication in Booknetic = 4.8.5 versions...
CVE-2026-25439
CVE-2026-25439 affects the WordPress Booknetic plugin up to version 4.8.5, with unauthenticated broken authentication leading to account takeover. The CVSSv3.1 vector (AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H) yields a base score of 8.1 (HIGH). Documented impact includes high confidentiality, integrit...
CVE-2026-25439 WordPress Booknetic plugin <= 4.8.5 - Account Takeover vulnerability
Unauthenticated Broken Authentication in Booknetic = 4.8.5 versions...
CVE-2026-25439 WordPress Booknetic plugin <= 4.8.5 - Account Takeover vulnerability
Unauthenticated Broken Authentication in Booknetic = 4.8.5 versions...
CVE-2026-25439: Authentication Bypass Using an Alternate Path or Channel
Unauthenticated Broken Authentication in Booknetic = 4.8.5 versions...
WordPress Booknetic plugin <= 4.8.5 - Account Takeover vulnerability
Account Takeover vulnerability discovered by Phat RiO in WordPress Plugin Booknetic versions = 4.8.5...
EUVD-2025-5400
Malicious code in bioql PyPI...
EUVD-2025-8106
Malicious code in bioql PyPI...
CVE-2024-13146
The Booknetic WordPress plugin before 4.1.5 does not have CSRF check when creating Staff accounts, which could allow attackers to make logged in admin add arbitrary Staff members via a CSRF attack...
WordPress Booknetic plugin < 4.1.5 - Staff Creation via CSRF vulnerability
Staff Creation via CSRF vulnerability discovered by Veshraj Ghimire in WordPress Plugin Booknetic versions 4.1.5...
CVE-2024-13146
The Booknetic WordPress plugin before 4.1.5 does not have CSRF check when creating Staff accounts, which could allow attackers to make logged in admin add arbitrary Staff members via a CSRF attack...
CVE-2024-13146 Booknetic < 4.1.5 - Staff Creation via CSRF
The Booknetic WordPress plugin before 4.1.5 does not have CSRF check when creating Staff accounts, which could allow attackers to make logged in admin add arbitrary Staff members via a CSRF attack...
CVE-2024-13146 Booknetic < 4.1.5 - Staff Creation via CSRF
The Booknetic WordPress plugin before 4.1.5 does not have CSRF check when creating Staff accounts, which could allow attackers to make logged in admin add arbitrary Staff members via a CSRF attack...
CVE-2024-13146
The Booknetic WordPress plugin (versions prior to 4.1.5 ) is vulnerable to a Cross-Site Request Forgery (CSRF) attack due to a lack of CSRF checks when creating Staff accounts . An attacker could trick a logged-in administrator into adding arbitrary Staff members, potentially leading to unauthori...
WordPress plugin Booknetic 安全漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...
PT-2025-12858 · WordPress · Booknetic
Name of the Vulnerable Software and Affected Versions: Booknetic WordPress plugin versions prior to 4.1.5 Description: The issue concerns a lack of CSRF check when creating Staff accounts, which could allow attackers to make logged-in admins add arbitrary Staff members via a CSRF attack. This cou...
CVE-2024-13146: Cross-Site Request Forgery (CSRF)
The Booknetic WordPress plugin before 4.1.5 does not have CSRF check when creating Staff accounts, which could allow attackers to make logged in admin add arbitrary Staff members via a CSRF attack...