CVE-2026-27405

MediumCVSS 6.5

Published: 20/05/2026(UTC)Updated: 24/07/2026(UTC)Translated: 25/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.31%

23th percentile - higher than 23% of all known CVEs

Summary

Missing authorization vulnerability in the WpBookingly plugin for WordPress allows exploiting incorrectly configured access control security levels.

Risk Assessment

Unauthorized users may gain access to administrative functions or sensitive data.

Recommendation

Update the WpBookingly plugin to the latest available version.

Original NVD description (English source)

Missing Authorization vulnerability in Magepeople inc. WpBookingly allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects WpBookingly: from n/a through 1.2.9.