Bookly <=28.1 - IDOR Unauthenticated Sensitive Data Access

Bookly WordPress plugin = 28.1 contains an insecure direct object reference caused by missing validation on 'conversationid' parameter, letting unauthenticated attackers read and inject messages into any AI booking conversation, exploit requires no authentication. id: CVE-2026-89063 info: name:...

Exploit for CVE-2026-93399

CVE-2026-93399 — Bookly IDOR order token disclosure & booking...

CVE-2026-32540: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Bookly Bookly bookly-responsive-appointment-booking-tool allows Reflected XSS.This issue affects Bookly: from n/a through = 26.7...

CVE-2025-25173: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in FasterThemes FastBook fastbook-responsive-appointment-booking-and-scheduling-system allows Stored XSS.This issue affects FastBook: from n/a through = 1.1...

CVE-2024-53762

Cross-Site Request Forgery CSRF vulnerability in FasterThemes FastBook fastbook-responsive-appointment-booking-and-scheduling-system allows Stored XSS.This issue affects FastBook: from n/a through = 1.1...

CVE-2024-53762

CVE-2024-53762 is a CSRF to Stored XSS vulnerability affecting the WordPress plugin FastBook – Responsive Appointment Booking and Scheduling System (FastBook) versions up to 1.1. The CVSS 3.1 base score is 7.1 (HIGH) with network attack vector, low attack complexity, no privileges required, but u...

CVE-2024-53762: Cross-Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in FasterThemes FastBook fastbook-responsive-appointment-booking-and-scheduling-system allows Stored XSS.This issue affects FastBook: from n/a through = 1.1...

PT-2024-35873

Name of the Vulnerable Software and Affected Versions FastBook – Responsive Appointment Booking and Scheduling System versions n/a through 1.1 Description The issue is a Cross-Site Request Forgery CSRF vulnerability that allows Stored XSS in the Faster Themes FastBook – Responsive Appointment...