Ladela

12 CVEs across 2 Ladela products. Browse Ladela vulnerabilities, severities, and proof-of-concept exploits.

Ladela products with known CVEs

ProductCVEs
Online Scheduling And Appointment Booking System – Bookly10
WordPress Online Booking And Scheduling Plugin – Bookly2
Ladela CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2026-93399Critical9.12026-09-25The Bookly plugin for WordPress is vulnerable to Insecure Direct Object Reference in versions up to, and including, 28.2 via the 'bookly_get_form_id', 'bookly_…
CVE-2026-92799Medium5.32026-09-25The Online Scheduling and Appointment Booking System – Bookly plugin for WordPress is vulnerable to Authorization Bypass via PHP Type Juggling in all versions…
CVE-2026-89063High7.52026-09-16The Online Scheduling and Appointment Booking System – Bookly plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and…
CVE-2026-2520Medium5.42026-09-08The Online Scheduling and Appointment Booking System – Bookly plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capabili…
CVE-2026-13424High7.22026-08-16The Online Scheduling and Appointment Booking System – Bookly plugin for WordPress is vulnerable to Stored Cross-Site Scripting via bookly_speed_up_update_addo…
CVE-2026-12905Medium4.32026-08-16The Bookly plugin for WordPress is vulnerable to Insecure Direct Object Reference in versions up to, and including, 27.7 via the appointment() method of the Mo…
CVE-2026-14516High7.52026-07-28The Online Scheduling and Appointment Booking System – Bookly plugin for WordPress is vulnerable to time-based SQL Injection via the 'staff_ids' parameter in a…
CVE-2026-5513High7.22026-06-13The Online Scheduling and Appointment Booking System – Bookly plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'bookly-customer-full-n…
CVE-2026-2519Medium5.32026-04-09The Online Scheduling and Appointment Booking System – Bookly plugin for WordPress is vulnerable to price manipulation via the 'tips' parameter in all versions…
CVE-2024-5584Medium6.42024-06-11The WordPress Online Booking and Scheduling Plugin – Bookly plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Color Profile parameter i…
CVE-2023-1159Medium4.02023-06-02The Bookly plugin for WordPress is vulnerable to Stored Cross-Site Scripting via service titles in versions up to, and including, 21.5 due to insufficient inpu…
CVE-2023-1172High7.22023-03-17The Bookly plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the full name value in versions up to, and including, 21.5 due to insufficient…