Unrated severityNVD Advisory· Published Jul 23, 2026· Updated Jul 23, 2026
WordPress Bookly plugin <= 27.7 - SQL Injection vulnerability
CVE-2026-61949
Description
Unauthenticated SQL Injection in Bookly <= 27.7 versions.
Affected products
1Patches
Vulnerability mechanics
References
1News mentions
1- Wordfence Intelligence Weekly WordPress Vulnerability Report (July 13, 2026 to July 19, 2026)Wordfence Blog · Jul 23, 2026