Ladela Online Scheduling And Appointment Booking System – Bookly

4 CVEs affecting Ladela Online Scheduling And Appointment Booking System – Bookly. Latest disclosed: 2026-07-28. Critical: 0, High: 2.

Top CVEs affecting Ladela Online Scheduling And Appointment Booking System – Bookly
CVESeverityScorePublishedSummary
CVE-2026-14516High7.52026-07-28The Online Scheduling and Appointment Booking System – Bookly plugin for WordPress is vulnerable to time-based SQL Injection via the 'staff_ids' parameter in a…
CVE-2026-5513High7.22026-06-13The Online Scheduling and Appointment Booking System – Bookly plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'bookly-customer-full-n…
CVE-2024-5584Medium6.42024-06-11The WordPress Online Booking and Scheduling Plugin – Bookly plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Color Profile parameter i…
CVE-2026-2519Medium5.32026-04-09The Online Scheduling and Appointment Booking System – Bookly plugin for WordPress is vulnerable to price manipulation via the 'tips' parameter in all versions…