Skip to content
OpenAdvisories
High · 7.7 CVE-2023-26526 EUVD-2023-30323GHSA-mhqh-vq6r-x93v

WordPress Bookly plugin <= 21.7.1 - Authenticated Arbitrary File Deletion vulnerability

Published May 17, 2024 · Updated Apr 28, 2026 · Assigned by Patchstack

Description

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Nota-Info Bookly allows Path Traversal, Manipulating Web Input to File System Calls.This issue affects Bookly: from n/a through 21.7.1.

Affected products

VendorProductAffectedFixed
Nota-Info Bookly ≤ 21.7.1 —

References