CVE-2026-96809: WordPress EduAdmin Booking plugin < 6.0.0 - SQL Injection vulnerability

Q: Which deployments should be prioritized for remediation?

Any WordPress site using the EduAdmin Booking plugin with a version earlier than 6.0.0 is affected. The affected version range begins at an unspecified earlier version and includes all releases before 6.0.0.

Q: Does exploitation require authentication or user interaction?

No. The severity vector indicates network-based exploitation with low attack complexity, no privileges required, and no user interaction required.

Q: What impact could successful exploitation have?

The vulnerability is a blind SQL injection issue. The provided severity vector indicates high confidentiality impact, no integrity impact, and low availability impact.

Published Oct 9, 2026

Updated

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in MultiNet Interactive AB EduAdmin Booking eduadmin-booking allows Blind SQL Injection.This issue affects EduAdmin Booking: from n/a before 6.0.0.

Affected Software

1 affected component

MultiNet Interactive AB EduAdmin Booking<6.0.0

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade WordPress EduAdmin Booking to a version that resolves this vulnerability.
Fixed in 6.0.0

Event History

Oct 9, 2026

CVE Published

via MITRE·10:00 AM

Data Sourced

via MITRE·10:00 AM

RemedyDescriptionSeverityWeakness

Frequently Asked Questions

Which deployments should be prioritized for remediation?

Any WordPress site using the EduAdmin Booking plugin with a version earlier than 6.0.0 is affected. The affected version range begins at an unspecified earlier version and includes all releases before 6.0.0.

Does exploitation require authentication or user interaction?

No. The severity vector indicates network-based exploitation with low attack complexity, no privileges required, and no user interaction required.

What impact could successful exploitation have?

The vulnerability is a blind SQL injection issue. The provided severity vector indicates high confidentiality impact, no integrity impact, and low availability impact.

CVE-2026-96809: WordPress EduAdmin Booking plugin < 6.0.0 - SQL Injection vulnerability

Affected Software

Remediation

Event History

Frequently Asked Questions

Which deployments should be prioritized for remediation?

Does exploitation require authentication or user interaction?

What impact could successful exploitation have?

Company

Resources

Contact

Frequently Asked Questions

Which deployments should be prioritized for remediation?

Does exploitation require authentication or user interaction?

What impact could successful exploitation have?