Ladela
5 CVEs across 2 Ladela products. Browse Ladela vulnerabilities, severities, and proof-of-concept exploits.
Ladela products with known CVEs
Ladela CVEs — newest first| CVE | Severity | Score | Published | Summary |
|---|
CVE-2026-14516 | High | 7.5 | 2026-07-28 | The Online Scheduling and Appointment Booking System – Bookly plugin for WordPress is vulnerable to time-based SQL Injection via the 'staff_ids' parameter in a… |
CVE-2026-5513 | High | 7.2 | 2026-06-13 | The Online Scheduling and Appointment Booking System – Bookly plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'bookly-customer-full-n… |
CVE-2026-2519 | Medium | 5.3 | 2026-04-09 | The Online Scheduling and Appointment Booking System – Bookly plugin for WordPress is vulnerable to price manipulation via the 'tips' parameter in all versions… |
CVE-2024-5584 | Medium | 6.4 | 2024-06-11 | The WordPress Online Booking and Scheduling Plugin – Bookly plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Color Profile parameter i… |
CVE-2023-1159 | Medium | 4.0 | 2023-06-02 | The Bookly plugin for WordPress is vulnerable to Stored Cross-Site Scripting via service titles in versions up to, and including, 21.5 due to insufficient inpu… |
CVE-2023-1172 | High | 7.2 | 2023-03-17 | The Bookly plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the full name value in versions up to, and including, 21.5 due to insufficient… |