bookit vulnerabilities

CVEs whose affected-version data names the bookit package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-110900Medium· 5.3

today

WordPress BookIt plugin <= 2.6.0.5 - Broken Access Control vulnerability

Missing Authorization vulnerability in Liquid Web / StellarWP BookIt bookit allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects BookIt: from n/a through 2.6.0.5.

▾ SunlitLiquid Web / StellarWP · bookitvia CVEORG