Exposure of Bookly

Appointment scheduling, WordPress plugins

20

exposure score

4,389

sites use

0

exploited

1

critical

CVEs

5 results

CVE-2023-26526HIGHWordPress Bookly plugin <= 21.7.1 - Authenticated Arbitrary File Deletion vulnerabilityEPSS 0.9%CVE-2026-42667HIGHWordPress Bookly plugin <= 27.4 - Sensitive Data Exposure vulnerabilityEPSS 0.3%CVE-2026-61949CRITICALWordPress Bookly plugin <= 27.7 - SQL Injection vulnerabilityEPSS 0.3%CVE-2026-61944HIGHWordPress Bookly plugin <= 27.7 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.2%CVE-2026-32540HIGHWordPress Bookly plugin <= 26.7 - Reflected Cross Site Scripting (XSS) vulnerabilityEPSS 0.1%