CVE-2026-109894: WordPress Booktics plugin <= 1.0.29 - SQL Injection vulnerability
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Arraytics Booktics booktics allows SQL Injection.This issue affects Booktics: from n/a through 1.0.29.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
WordPress Booktics pluginto a version that resolves this vulnerability.Fixed in 1.0.30
Event History
Frequently Asked Questions
Which deployments are affected?
Arraytics Booktics versions through 1.0.29 are affected. The available information does not identify any configuration prerequisite or unaffected fixed version.
Does exploitation require authentication or user interaction?
No. The CVSS vector indicates the issue is network-accessible, has low attack complexity, requires no privileges, and requires no user interaction.
What impact could successful exploitation have?
The CVSS vector indicates high confidentiality impact and low availability impact, with no integrity impact indicated. Scope is marked changed, meaning the vulnerable component could affect resources beyond its own security authority.