Vulnerabilities and Security Researches

WordPress Online Booking and Scheduling Plugin – Bookly, CVE-2026-96347

CVE, Research URL: CVE-2026-96347
Home page URL: Security reports for WordPress Online Booking and Scheduling Plugin – Bookly
Application: WordPress Online Booking and Scheduling Plugin – Bookly
Published on: Sep 30, 2026
Research Description: Subscriber Insecure Direct Object References (IDOR) in Bookly <= 28.2 versions.
Affected versions: max 28.3.
Status: vulnerable