CRITICAL
9.3 CVE-2026-109894 Published 18 Oct 2026
Booktics WordPress Plugin SQL Injection Vulnerability
Worried this affects your website?
A vulnerability has been reported in Booktics from Arraytics. The issue is an SQL Injection flaw caused by improper neutralization of special elements used in an SQL command.
This vulnerability allows SQL Injection attacks and affects Booktics from version n/a through 1.0.29.
- Affected versions: from n/a through 1.0.29
Reference: CVE-2026-109894 on NVD
← Back to Security News