WordPress Plugin Vulnerabilities

Bookly < 28.2 - Unauthenticated AI Assistant Conversation Disclosure and Message Injection via IDOR

Description

The plugin does not verify that the requester owns the AI booking-assistant conversation named in its unauthenticated conversation actions, allowing any unauthenticated visitor to read another visitor's assistant messages and to inject messages into their in-progress conversation.

Proof of Concept

Affects Plugins

Plugin icon
bookly-responsive-appointment-booking-tool
Fixed in 28.2

References

CVE
CVE-2026-91847

Classification

Type
IDOR
OWASP top 10
A5: Broken Access Control
CWE
CWE-639
CVSS
4.8 (medium)

Miscellaneous

Original Researcher
vuxvinh
Submitter
vuxvinh
Verified
Yes
WPVDB ID
9eef3086-3a67-4ee2-bd78-e346e7b05d62

Timeline

Publicly Published
2026-09-17 (about 2 days ago)
Added
2026-09-17 (about 1 day ago)
Last Updated
2026-09-17 (about 1 day ago)

Other

Published
Title
Published
2024-04-15
Title
Login with phone number < 1.7.17 - Unauthorized Account Password Change to Privilege Escalation
Published
2026-08-13
Title
Do Lasso <= 358 - Unauthenticated Insecure Direct Object Reference
Published
2026-07-28
Title
Formidable Forms Signature Online Contract Automation < 2.0.2 - Unauthenticated Insecure Direct Object Reference
Published
2026-08-26
Title
Timetics <= 1.0.62 - Staff+ Cross-Staff Appointment Modification via IDOR
Published
2026-01-29
Title
Shiprocket <= 2.0.8 - Authenticated (Subscriber+) Insecure Direct Object Reference