CVE-2026-96348

Description

Unauthenticated Broken Access Control in Bookly <= 28.2 versions.

References

• https://patchstack.com/database/wordpress/plugin/bookly-responsive-appointment-booking-tool/vulnerability/wordpress-bookly-plugin-28-2-broken-access-control-vulnerability?_s_id=cve