Bookly

Products

ProductCVEsExploitedLatest
Bookly6–Sep 30, 2026

Exploited and recent CVEs

  • CVE-2026-96348 High 7.5 WordPress Bookly plugin <= 28.2 - Broken Access Control vulnerability 0.3%
  • CVE-2026-96347 Medium 6.5 WordPress Bookly plugin <= 28.2 - Insecure Direct Object References (IDOR) vulnerability 0.3%
  • CVE-2026-61949 Critical 9.3 WordPress Bookly plugin <= 27.7 - SQL Injection vulnerability 0.4%
  • CVE-2026-61944 High 7.1 WordPress Bookly plugin <= 27.7 - Cross Site Scripting (XSS) vulnerability 0.3%
  • CVE-2026-42667 High 7.5 WordPress Bookly plugin <= 27.4 - Sensitive Data Exposure vulnerability 0.3%
  • CVE-2026-32540 High 7.1 WordPress Bookly plugin <= 26.7 - Reflected Cross Site Scripting (XSS) vulnerability 0.2%