All packages
BookIt vulnerabilities
3 known CVE vulnerabilities in BookIt, translated and rated.
- CVE-2026-84767Medium
The BookIt plugin version 2.6.0.3 and earlier contains an unauthenticated bypass vulnerability.
- CVE-2026-40780High
BookIt by Liquid Web / StellarWP before version 2.5.4.1 contains an authentication bypass vulnerability via an alternate path or channel, allowing password recovery exploitation.
- CVE-2025-12841Medium
The Bookit WordPress plugin before 2.5.1 has a publicly accessible REST endpoint that allows unauthenticated update of the plugin's Stripe payment options.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS