PatchSiren

Booknetic CVE debriefs

These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.

CRITICAL Booknetic CVE published 2026-10-06

CVE-2026-39746

A critical SQL injection vulnerability exists in the Booknetic plugin, allowing for blind SQL injection attacks. This issue affects Booknetic versions from n/a before 5.10.4. The vulnerability has a CVSS score of 9.3 and is considered CRITICAL. Defenders responsible for managing and securing WordPress installations with the Booknetic plugin should assess exposure and prioritize patching or mitigation effo [truncated]