Booknetic

Booknetic has 4 disclosed vulnerabilities in the WordSec catalog, reported between 2025 and 2026; 1 is fixed and 3 remain unpatched as of October 2026. Their average CVSS score is 5.4, and the most serious one scores 7.5 out of 10. Severity breakdown: 0 critical and 1 high. 2026 was the busiest year with 2 disclosures.

The most common weakness is Cross-Site Request Forgery, behind 2 of the records (50%). Other recurring categories include Improper Neutralization Of Special Elements Used In An SQL Command, Missing Authorization.

1 of the records (25%) have a vendor fix, while 3 remain unpatched. The oldest unresolved one dates back to 2025.

4 independent researchers contributed these findings, one record each.

01234567891024.02.2025Today24.02.20254.3Booknetic <= 4.0.9 - Cross-Site Request Forgery CVSS 4.3 · 24.02.202505.03.20254.3Booknetic 4.0 - 4.1.4 - Cross-Site Request Forgery CVSS 4.3 · 05.03.202501.06.20265.3Booknetic <= 4.8.5 - Missing Authorization CVSS 5.3 · 01.06.202605.10.20267.5Booknetic <= 4.8.5 - Unauthenticated SQL Injection CVSS 7.5 · 05.10.2026

Strategic Overview

Avg CVSSMedium
5.4/ 10
Patch Coverage25%
Open

3

Fixed

1

Get automatic notifications for all Booknetic vulnerabilities before they are exploited.

Most severe open issueCVSS 7.5CVE-2026-39746

Booknetic <= 4.8.5 - Unauthenticated SQL Injection

Read the full analysis

Vulnerability Records

4 records
Showing 1–4 of 4 reports

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C