Plugin icon

Online Scheduling and Appointment Booking System – Bookly

bookly-responsive-appointment-booking-tool

Vulnerabilities:

8

Last Updated:

March 20, 2026

Active Installs:

70000

Published
Title
Fixed in
CVSS
Published
2026-03-20
Title
Online Scheduling and Appointment Booking System – Bookly < 26.8 - Reflected Cross-Site Scripting
Fixed in
Fixed in 26.8
CVSS
6.1 (medium)
Published
2024-06-10
Title
WordPress Online Booking and Scheduling Plugin – Bookly < 23.3 - Authenticated (Subscriber+) Stored Cross-Site Scripting via Color Profile Parameter
Fixed in
Fixed in 23.3
CVSS
6.4 (medium)
Published
2023-11-06
Title
Bookly < 22.5 - Admin+ Stored XSS
Fixed in
Fixed in 22.5
CVSS
3.5 (low)
Published
2023-09-25
Title
Bookly < 22.4 - Admin+ SQLi
Fixed in
Fixed in 22.4
CVSS
4.1 (medium)
Published
2023-06-01
Title
Bookly < 21.8 - Admin+ Stored Cross-Site Scripting via service titles
Fixed in
Fixed in 21.8
CVSS
4.0 (medium)
Published
2023-03-17
Title
Bookly < 21.6 - Unauthenticated Stored XSS
Fixed in
Fixed in 21.6
CVSS
8.8 (high)
Published
2021-11-08
Title
Bookly < 20.3.1 - Staff Member Stored Cross-Site Scripting
Fixed in
Fixed in 20.3.1
CVSS
5.4 (medium)
Published
2018-02-10
Title
Bookly #1 WordPress Booking Plugin (Lite) < 14.5 – Unauthenticated Blind Stored XSS
Fixed in
Fixed in 14.5
CVSS
6.1 (medium)