agentprime: ladela-online-scheduling-and-appointment-booking-system-booklyEvery new CVE for ladela-online-scheduling-and-appointment-booking-system-bookly.https://agentprime.io/CVE-2026-12626: Online Scheduling and Appointment Booking System <= 28.2 - Authenticated (Custom+) PHP Object Injection via 'value' Parameterhttps://agentprime.io/advisories/CVE-2026-12626/https://agentprime.io/advisories/CVE-2026-12626/CVSS 7.2 (High). Published by the CVE Program. Not analysed by agentprime yet.Sat, 10 Oct 2026 06:40:10 GMTCVECVE-2026-103365: Online Scheduling and Appointment Booking System <= 28.4 - Unauthenticated Sensitive Information Exposure in 'phone' Parameter to bookly_render_detailshttps://agentprime.io/advisories/CVE-2026-103365/https://agentprime.io/advisories/CVE-2026-103365/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Sat, 10 Oct 2026 03:26:45 GMTCVECVE-2026-104898: Online Scheduling and Appointment Booking System <= 28.4 - Insecure Direct Object Reference to Authenticated (Subscriber+) Privilege Escalation via 'id' and 'wp_user_id' Parameters via Query String /…https://agentprime.io/advisories/CVE-2026-104898/https://agentprime.io/advisories/CVE-2026-104898/CVSS 6.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Sat, 10 Oct 2026 03:26:43 GMTCVECVE-2026-93399: Online Scheduling and Appointment Booking System <= 28.2 - Insecure Direct Object Reference to Unauthenticated Arbitrary Booking Token Disclosure and Deletion via 'order_id' Parameterhttps://agentprime.io/advisories/CVE-2026-93399/https://agentprime.io/advisories/CVE-2026-93399/CVSS 9.1 (Critical). Critical: CVSS score 9.1: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Fri, 25 Sep 2026 06:39:55 GMTCVEcriticalCVE-2026-92799: Online Scheduling and Appointment Booking System <= 28.2 - Unauthenticated Authorization Bypass via PHP Type Juggling via 'verification_code' Parameter Type Juggling via json_datahttps://agentprime.io/advisories/CVE-2026-92799/https://agentprime.io/advisories/CVE-2026-92799/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 25 Sep 2026 06:39:55 GMTCVECVE-2026-89063: Online Scheduling and Appointment Booking System <= 28.1 - Insecure Direct Object Reference to Unauthenticated Sensitive Data Access and Message Injection via 'conversation_id' Parameterhttps://agentprime.io/advisories/CVE-2026-89063/https://agentprime.io/advisories/CVE-2026-89063/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 16 Sep 2026 04:28:02 GMTCVECVE-2026-2520: Online Scheduling and Appointment Booking System – Bookly <= 27.2 - Missing Authorization to Authenticated (Subscriber+) Limited Arbitrary Plugin Updatehttps://agentprime.io/advisories/CVE-2026-2520/https://agentprime.io/advisories/CVE-2026-2520/CVSS 5.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 08 Sep 2026 11:30:01 GMTCVECVE-2026-13424: Online Scheduling and Appointment Booking System <= 27.7 - Unauthenticated Stored Cross-Site Scripting via bookly_speed_up_update_addons AJAX actionhttps://agentprime.io/advisories/CVE-2026-13424/https://agentprime.io/advisories/CVE-2026-13424/CVSS 7.2 (High). Published by the CVE Program. Not analysed by agentprime yet.Sun, 16 Aug 2026 06:38:08 GMTCVECVE-2026-12905: Online Scheduling and Appointment Booking System – Bookly <= 27.7 - Authenticated (Staff+) Insecure Direct Object Reference to Sensitive Information Exposure via 'params[id]' Parameterhttps://agentprime.io/advisories/CVE-2026-12905/https://agentprime.io/advisories/CVE-2026-12905/CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Sun, 16 Aug 2026 04:24:49 GMTCVECVE-2026-14516: Online Scheduling and Appointment Booking System <= 27.5 - Unauthenticated SQL Injectionhttps://agentprime.io/advisories/CVE-2026-14516/https://agentprime.io/advisories/CVE-2026-14516/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 28 Jul 2026 08:34:35 GMTCVECVE-2026-5513: Online Scheduling and Appointment Booking System – Bookly <= 27.2 - Unauthenticated Stored Cross-Site Scripting via 'bookly-customer-full-name' Cookiehttps://agentprime.io/advisories/CVE-2026-5513/https://agentprime.io/advisories/CVE-2026-5513/CVSS 7.2 (High). Published by the CVE Program. Not analysed by agentprime yet.Sat, 13 Jun 2026 11:25:24 GMTCVECVE-2026-2519: Online Scheduling and Appointment Booking System – Bookly <= 27.0 - Unauthenticated Price Manipulation via 'tips'https://agentprime.io/advisories/CVE-2026-2519/https://agentprime.io/advisories/CVE-2026-2519/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 09 Apr 2026 12:28:06 GMTCVECVE-2024-5584: WordPress Online Booking and Scheduling Plugin – Bookly <= 23.2 - Authenticated (Subscriber+) Stored Cross-Site Scripting via Color Profile Parameterhttps://agentprime.io/advisories/CVE-2024-5584/https://agentprime.io/advisories/CVE-2024-5584/CVSS 6.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 11 Jun 2024 09:32:02 GMTCVE