Skip to content
OpenAdvisories

Vendor

Bookly

6 known vulnerabilities.

Products

Bookly 6
All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • High 7.5
    CVE-2026-96348

    WordPress Bookly plugin <= 28.2 - Broken Access Control vulnerability

    Unauthenticated Broken Access Control in Bookly <= 28.2 versions.

    Bookly Bookly
  • High 7.1
    CVE-2026-61944

    WordPress Bookly plugin <= 27.7 - Cross Site Scripting (XSS) vulnerability

    Unauthenticated Cross Site Scripting (XSS) in Bookly <= 27.7 versions.

    Bookly Bookly
  • High 7.5
    CVE-2026-42667

    WordPress Bookly plugin <= 27.4 - Sensitive Data Exposure vulnerability

    Unauthenticated Sensitive Data Exposure in Bookly <= 27.4 versions.

    Bookly Bookly
  • High 7.1
    CVE-2026-32540

    WordPress Bookly plugin <= 26.7 - Reflected Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Bookly Bookly bookly-responsive-appointment-booking-tool allows Reflected XSS.This issue affects Bookly: from n/a through <= 26.7.

    Bookly Bookly