CVE Catalog
CVE-2026-61949
CriticalCVSS 9.3Summary
The Bookly plugin versions up to 27.7 are vulnerable to unauthenticated SQL injection.
Risk Assessment
An unauthenticated attacker can execute arbitrary SQL queries, potentially leading to data leakage or modification.
Recommendation
It is recommended to update the Bookly plugin to a version later than 27.7.
Original NVD description (English source)
Unauthenticated SQL Injection in Bookly <= 27.7 versions.