8.5 High

CVE-2026-49073 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in wpWax…

Description

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in wpWax Directorist Booking allows Blind SQL Injection. This issue affects Directorist Booking: from n/a through 3.0.3.

Affected products and versions

Product	Affected versions	Fixed in
Directorist Booking 3.0	earliest → 3.0.3	No fix stated

Do you use Directorist Booking?

Track this CVE Watch Directorist Booking Check my SBOMs

www.cveye.io/en/cve/CVE-2026-49073

Timeline

Published June 16, 2026
Last modified June 17, 2026

References

patchstack.com patchstack.com

Track this CVE