Bookly vulnerabilities
6 published CVEs name Bookly among the affected products.
- 6Published CVEs6 of them scored
- 6Last 12 monthspublished in the last year
- 1Critical4 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-96348
WordPress Bookly plugin <= 28.2 - Broken Access Control vulnerability
Bookly · Bookly
High7.5 - CVE-2026-96347
WordPress Bookly plugin <= 28.2 - Insecure Direct Object References (IDOR) vulnerability
Bookly · Bookly
Medium6.5 - CVE-2026-61949
WordPress Bookly plugin <= 27.7 - SQL Injection vulnerability
Bookly · Bookly
Critical9.3 - CVE-2026-61944
WordPress Bookly plugin <= 27.7 - Cross Site Scripting (XSS) vulnerability
Bookly · Bookly
High7.1 - CVE-2026-42667
WordPress Bookly plugin <= 27.4 - Sensitive Data Exposure vulnerability
Bookly · Bookly
High7.5 - CVE-2026-32540
WordPress Bookly plugin <= 26.7 - Reflected Cross Site Scripting (XSS) vulnerability
Bookly · Bookly
High7.1