CVE-2026-96822: WordPress Books Gallery plugin <= 4.8.3 - SQL Injection vulnerability
Published Sep 30, 2026
·Updated
Unauthenticated SQL Injection in Books Gallery <= 4.8.3 versions.
Affected Software
1 affected component
WordPress Books Gallery<=4.8.3
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
WordPress Books Gallery pluginto a version that resolves this vulnerability.Fixed in 4.8.4
Event History
Sep 30, 2026
CVE Published
via MITRE·12:27 PM
Data Sourced
via MITRE·12:27 PM
RemedyDescriptionSeverityWeakness
Data Sourced
via NVD·01:17 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
Who can exploit this vulnerability?
The issue is unauthenticated, so an attacker does not need a WordPress account or other prior privileges. It is remotely exploitable with low attack complexity and requires no user interaction.
2
Which installations are affected?
WordPress sites using Books Gallery version 4.8.3 or earlier are affected according to the available information.
3
What is the potential impact of successful exploitation?
Successful exploitation may allow an attacker to access highly sensitive information and can have scope-changing effects. The listed impact also includes low availability impact, while integrity impact is listed as none.