Vendor

Bookly

6 known vulnerabilities.

Products

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

Critical 9.3

CVE-2026-61949

WordPress Bookly plugin <= 27.7 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Bookly Bookly bookly-responsive-appointment-booking-tool allows Blind SQL Injection.This issue affects Bookly: from n/a through 27.7.

Bookly Bookly

Jul 23, 2026