Monitor vulnerabilities like this one. Sign up free to get alerted when software you use is affected.

CVE-2026-57621: Booktics <= 1.0.21: Unauthenticated PHP Object Injection

CVE-2026-57621

Summary

Booktics software versions up to 1.0.21 are vulnerable to a type of attack that could allow an attacker to execute malicious code. This could lead to unauthorized access to sensitive data or system compromise. It is recommended to update to the latest version of Booktics to fix this issue.

Original title

Unauthenticated PHP Object Injection in Booktics <= 1.0.21 versions.

Original description

Unauthenticated PHP Object Injection in Booktics <= 1.0.21 versions.

nvd CVSS3.1 9.8

Vulnerability type

CWE-502 Deserialization of Untrusted Data

https://patchstack.com/database/wordpress/plugin/booktics/vulnerability/wordpres...

Published: 2 Jul 2026 · Updated: 23 Jul 2026 · First seen: 2 Jul 2026