9.3
Critical
CVE-2026-62048 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Liquid Web /…
Description
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Liquid Web / StellarWP BookIt bookit allows SQL Injection.This issue affects BookIt: from n/a through 2.6.0.6.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| BookIt 2.6 | earliest → 2.6.0.6 | No fix stated |
Other CVEs of BookIt
The 4 CVEs of BookIt →
CVE-2026-62019
Missing Authorization vulnerability in Liquid Web / StellarWP BookIt bookit allows Exploiting Incorrectly Configured…
4.3
Medium
CVE-2026-110900
Missing Authorization vulnerability in Liquid Web / StellarWP BookIt bookit allows Exploiting Incorrectly Configured…
5.3
Medium
CVE-2026-40780
Authentication Bypass Using an Alternate Path or Channel vulnerability in Liquid Web / StellarWP BookIt allows…
7.5
High