Themerex Booked vulnerabilities

• themerex booked WordPress Booked plugin <= 3.0.0 - Cross Site Request Forgery (CSRF) vulnerability CVE-2026-57747 6.5 MediumJuly 2, 2026
• themerex booked WordPress Booked plugin <= 3.0.0 - Broken Access Control vulnerability CVE-2026-57746 7.1 HighJuly 2, 2026