Skip to content
Threat Feed
Subscribe

Tag

Cve-2026-12626

1 brief RSS
high advisory

PHP Object Injection Vulnerability in Bookly WordPress Plugin

The Bookly plugin for WordPress contains a PHP Object Injection vulnerability in versions 28.2 and earlier, allowing authenticated users with custom-level access to inject arbitrary PHP objects.

Bookly web-application php-injection wordpress cve-2026-12626
2t 1c