UpHeron
All vulnerabilities

WordPress plugins

CVE-2026-61949

WordPress Bookly plugin <= 27.7 - SQL Injection vulnerability

Severity
Critical 9.3
Published
23 Jul 2026
Last changed
10 Nov 2026
Added to UpHeron
10 Nov 2026
Sources
CVE Program

Affected software

SoftwareAffected versions
Bookly Responsive Appointment Booking Tool (WordPress plugin)WordPress plugins · wp-plugin:bookly-responsive-appointment-booking-tool
  • Every version up to 27.7

References

  • CVE.org https://www.cve.org/CVERecord?id=CVE-2026-61949