L
Üretici güvenlik profili
ladela
Ürün portföyü, yama kanıtları ve sömürü sinyalleri tek güvenlik karnesinde
Veriler CVE Programı, NVD, CISA KEV ve üretici güvenlik bültenlerinden birleştirilir.
Toplam CVE8
Kritik1
CISA KEV0
Public exploit1
Yama oranı%0
Ort. CVSS6.6
12 aylık açık hızı
0
0
0
0
0
0
0
0
0
2
3
3
CVE KEV
CVE önem dağılımı
8toplam CVE
Kritik1 (13%)
Yüksek3 (38%)
Orta4 (50%)
Yama ve sömürü görünümü
%0
Doğrulanmış yama
%0
CISA KEV
%13
Public exploit
0Yama var
0Kısmi
0Geçici çözüm
0Üretici: yama yok
8Bilinmiyor
Son güvenlik açıkları
7.2
CVE-2026-12626
Online Scheduling and Appointment Booking System <= 28.2 - Authenticated (Custom+) PHP Object Injection via 'value' Parameter
L
Yama durumu bilinmiyorEPSS %0
5.3
CVE-2026-103365
Online Scheduling and Appointment Booking System <= 28.4 - Unauthenticated Sensitive Information Exposure in 'phone' Parameter to bookly_render_details
L
Yama durumu bilinmiyorEPSS %0
6.8
CVE-2026-104898
Online Scheduling and Appointment Booking System <= 28.4 - Insecure Direct Object Reference to Authenticated (Subscriber+) Privilege Escalation via 'id' and 'wp_user_id' Parameters via Query String / JSON Body
L
Yama durumu bilinmiyorEPSS %0
9.1
CVE-2026-93399
Online Scheduling and Appointment Booking System <= 28.2 - Insecure Direct Object Reference to Unauthenticated Arbitrary Booking Token Disclosure and Deletion via 'order_id' Parameter
L
Yama durumu bilinmiyorEPSS %0
5.3
CVE-2026-92799
Online Scheduling and Appointment Booking System <= 28.2 - Unauthenticated Authorization Bypass via PHP Type Juggling via 'verification_code' Parameter Type Juggling via json_data
L
Yama durumu bilinmiyorEPSS %0
7.5
CVE-2026-89063
Online Scheduling and Appointment Booking System <= 28.1 - Insecure Direct Object Reference to Unauthenticated Sensitive Data Access and Message Injection via 'conversation_id' Parameter
L
Yama durumu bilinmiyorEPSS %2
7.2
CVE-2026-13424
Online Scheduling and Appointment Booking System <= 27.7 - Unauthenticated Stored Cross-Site Scripting via bookly_speed_up_update_addons AJAX action
L
Yama durumu bilinmiyorEPSS %1
4.3
CVE-2026-12905
Online Scheduling and Appointment Booking System – Bookly <= 27.7 - Authenticated (Staff+) Insecure Direct Object Reference to Sensitive Information Exposure via 'params[id]' Parameter
L
Yama durumu bilinmiyorEPSS %0