← All advisories

High severity7.5NVD Advisory· Published Jun 2, 2026· Updated Jun 2, 2026

CVE-2026-40780

CVE-2026-40780

Description

Authentication Bypass Using an Alternate Path or Channel vulnerability in Liquid Web / StellarWP BookIt allows Password Recovery Exploitation.

This issue affects BookIt: from n/a before 2.5.4.1.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3

Stellarwp/BookItllm-fuzzy2 versions
<2.5.4.1+ 1 more
- (no CPE)range: <2.5.4.1
- (no CPE)range: <2.5.4.1
WordPress/Bookitllm-fuzzy
Range: <2.5.4.1
Package: https://wordpress.org/plugins/bookit

Patches

Vulnerability mechanics

References

1

patchstack.com/database/wordpress/plugin/bookit/vulnerability/wordpress-bookit-plugin-2-5-1-broken-authentication-vulnerabilitynvd

News mentions

1

WordPress: 25 Plugin and Theme Vulnerabilities Disclosed in Single Batch
Vypr Intelligence · Jun 3, 2026