WordPress Online Scheduling and Appointment Booking System – Bookly plugin <= 28.2 - Insecure Direct Object Reference to Unauthenticated Arbitrary Booking Token Disclosure and Deletion vulnerability

Insecure Direct Object Reference to Unauthenticated Arbitrary Booking Token Disclosure and Deletion vulnerability discovered by Theklis in WordPress Plugin Bookly versions = 28.2...