CVE-2026-28002
WordPress Booktics plugin 1.0.22 - SQL Injection vulnerability
CVSS score
8.5
EPSS probability
%0.4
Risk score
0.0
Published
2 mo ago
Public Exploits · GitHub and Metasploit Intelligence
This tab scans the sources that NVD labels as exploits, GitHub repositories matching the CVE identifier and Rapid7 Metasploit Framework modules. Only links to sources that were actually found are shown.
No verified public exploit code was found.
GitHub repositories, NVD exploit references and the Metasploit Framework were scanned. A record of active exploitation does not mean that public exploit code has been published.
Similar Vulnerabilities
7.5
CVE-2026-75983
Eventin – Event Calendar, Tickets, Registration, Booking & WooCommerce <= 4.1.23 - Authenticated (Subscriber+) Privilege Escalation via map_meta_cap Filter
A
Patch status unknownEPSS %1
7.5
CVE-2026-75028
WPCafe <= 3.0.18 - Authenticated (Contributor+) Local File Inclusion via 'food_menu_style' Elementor Widget Setting
A
Patch status unknownEPSS %1
7.5
CVE-2026-15406
Eventin <= 4.1.22 - Authenticated (Custom+) Local File Inclusion via 'event_layout' Parameter
A
Patch status unknownEPSS %1
6.5
CVE-2026-28174
WordPress WP Event SOlution plugin <= 4.1.18 - Sensitive Data Exposure vulnerability
A
Patch status unknownEPSS %0
7.1
CVE-2026-28173
WordPress WP Event SOlution plugin <= 4.1.19 - Arbitrary Content Deletion vulnerability
A
Patch status unknownEPSS %0
6.5
CVE-2026-82223
WordPress WP Event SOlution plugin <= 4.1.22 - Broken Access Control vulnerability
A
Patch status unknownEPSS %0
Get this vulnerability through the API
Affected products, version ranges, exploitation status and patch information in a single request, with a free key.
curl -H "x-api-key: $DAYBREACH_API_KEY" \ "https://api.daybreach.dev/api/v1/intel/cves/CVE-2026-28002"