CVE-2026-84767

MediumCVSS 5.3

Published: 03/09/2026(UTC)Updated: 04/09/2026(UTC)Translated: 03/09/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.12%

2th percentile - higher than 2% of all known CVEs

Summary

The BookIt plugin version 2.6.0.3 and earlier contains an unauthenticated bypass vulnerability.

Risk Assessment

An unauthenticated attacker can exploit this vulnerability to bypass security mechanisms, potentially leading to unauthorized access to functionality or data.

Recommendation

Update the BookIt plugin to the latest version that includes a fix for the vulnerability.

Other vulnerabilities in BookIt

CVE-2026-40780High
BookIt by Liquid Web / StellarWP before version 2.5.4.1 contains an authentication bypass vulnerability via an alternate path or channel, allowing password recovery exploitation.

Original NVD description (English source)

Unauthenticated Bypass Vulnerability in BookIt <= 2.6.0.3 versions.