Bookly
Bookly
Developer
28.1
Latest version
60,000
Installations
No date
Last updated
Vulnerability history
0 present
16 patched
10 Mitigation rules
- WordPress Online Scheduling and Appointment Booking System - Bookly plugin <= 27.7 - Authenticated (Staff+) Insecure Direct Object Reference to Sensitive Information Exposure via 'params[id]' Parameter vulnerability<= 27.718/08/2026
- Unauthenticated SQL Injection vulnerability< 27.803/08/2026
- SQL Injection vulnerability<= 27.730/07/2026
- SQL Injection vulnerability<= 27.716/07/2026
- Cross Site Scripting (XSS) vulnerability<= 27.716/07/2026
- Unauthenticated Stored Cross-Site Scripting vulnerability<= 27.215/06/2026
- Sensitive Data Exposure vulnerability<= 27.410/05/2026
- WordPress Online Scheduling and Appointment Booking System - Bookly plugin <= 27.0 - Unauthenticated Price Manipulation via 'tips' vulnerability<= 27.009/04/2026
- Reflected Cross Site Scripting (XSS) vulnerability<= 26.720/03/2026
- Authenticated (Subscriber+) Stored Cross-Site Scripting via Color Profile Parameter vulnerability<= 23.211/06/2024
- Admin+ SQLi vulnerability< 22.417/10/2023
- Admin+ Stored Cross-Site Scripting via service titles vulnerability< 21.822/06/2023
- Authenticated Arbitrary File Deletion vulnerability<= 21.7.111/05/2023
- Unauthenticated Stored Cross-Site Scripting via Name vulnerability<= 21.520/03/2023
- Stored Cross-Site Scripting (XSS) vulnerability<= 20.308/11/2021
- Unauth. Stored Cross-Site Scripting (XSS) vulnerability<= 14.410/02/2018