CVE-2025-26926

MediumCVSS 4.3

Published: 25/02/2025(UTC)Updated: 28/10/2026(UTC)Translated: 28/10/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.16%

5th percentile - higher than 5% of all known CVEs

Summary

The Booknetic plugin contains a Cross-Site Request Forgery (CSRF) vulnerability. This affects versions before 5.10.4.

Risk Assessment

An attacker could force an authenticated user to perform unwanted actions within the application.

Recommendation

Update the Booknetic plugin to version 5.10.4 or later.

Other vulnerabilities in Booknetic

See all

CVE-2026-39746Critical
The Booknetic plugin is vulnerable to SQL Injection (improper neutralization of special elements in SQL commands), allowing an attacker to perform Blind SQL Injection. This issue affects versions before 5.10.3.
CVE-2026-25439High
The Booknetic plugin contains an Authentication Bypass Using an Alternate Path or Channel vulnerability, allowing authentication abuse. This issue affects versions before 5.10.3.

Original NVD description (English source)

Cross-Site Request Forgery (CSRF) vulnerability in Booknetic Booknetic booknetic allows Cross Site Request Forgery.This issue affects Booknetic: from n/a before 5.10.4.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS