Booknetic Vulnerabilities

The Booknetic plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on a function in all versions up to, and including, 4.8.5. This makes it possible for unauthenticated attackers to perform an unauthorized action.

CVSS:

5.3

Affected:

up to 4.8.5

Fix:

No patched version reported

Disclosed:

Jun 1, 2026

CVE-2026-25439 on NVD →

The Booknetic plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions 4.0 to 4.1.4. This is due to missing or incorrect nonce validation on a function. This makes it possible for unauthenticated attackers to create staff via a forged request granted they can trick a site administrator into performi...

CVSS:

4.3

Affected:

4.0 – 4.1.4

Fixed in:

4.1.5

Disclosed:

Mar 5, 2025

CVE-2024-13146 on NVD →

The Booknetic plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 4.0.9. This is due to missing or incorrect nonce validation on a function. This makes it possible for unauthenticated attackers to perform an unauthorized action via a forged request granted they can trick a...

CVSS:

4.3

Affected:

up to 4.0.9

Fix:

No patched version reported

Disclosed:

Feb 24, 2025

CVE-2025-26926 on NVD →