Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.

CVE-2026-25439: WordPress Booknetic plugin < 5.10.3 - Broken Authentication vulnerability

CVE-2026-25439 · published 4 months ago

Summary

Authentication Bypass Using an Alternate Path or Channel vulnerability in Booknetic Booknetic booknetic allows Authentication Abuse.This issue affects Booknetic: from n/a before 5.10.3.

What to do

Update booknetic booknetic to version 5.10.4.
Update booknetic booknetic to version 5.10.3.

Affected software

Vendor	Product	Affected versions
booknetic	booknetic	< 5.10.4 < 5.10.3 Fix: upgrade to 5.10.4

Original advisory text

WordPress Booknetic plugin < 5.10.3 - Broken Authentication vulnerability

Authentication Bypass Using an Alternate Path or Channel vulnerability in Booknetic Booknetic booknetic allows Authentication Abuse.This issue affects Booknetic: from n/a before 5.10.3.

References

https://patchstack.com/database/wordpress/plugin/booknetic/vulnerability/wordpre... vdb-entry

Fix within

Internet-facing 14 days

Internal At next upgrade

Not known to be exploited
Needs hands-on effort to exploit
Gives an attacker full control

Severity

8.1 High

Exploitation

<1% chance of attack within 30 days

Type

CWE-288Authentication Bypass Using Alternate Path

Timeline

Published17 Jun 2026

Updated4 Nov 2026

First seen29 Sep 2026

Sources

CVE-2026-25439 · NVD

CVE-2026-25439 · MITRE

Track software like this

Free during beta