Skip to content
Threat Feed
Subscribe

Tag

Cve-2026-89063

1 brief RSS
high advisory

IDOR Vulnerability in Bookly WordPress Plugin

An Insecure Direct Object Reference (IDOR) vulnerability in the Bookly WordPress plugin allows unauthenticated attackers to enumerate and exfiltrate private AI booking transcripts via sequential ID incrementation.

Bookly web-application wordpress idor cve-2026-89063
2t 1c