CVE-2026-86837
MEDIUM
NVD
CVSS Score
5.3
Severity
MEDIUM
Published
Sep 25, 2026
Vendor
unknown
Description
The Bookly WordPress plugin before 28.3 does not properly verify a customer's identity before updating their stored details, allowing unauthenticated attackers who know a customer's primary identifier to overwrite that customer's stored personal information such as name, email and address.