Unknown Bookit vulnerabilities

• liquid web / stellarwp bookit WordPress BookIt plugin <= 2.6.0.6 - SQL Injection vulnerability CVE-2026-62048 9.3 CriticalNovember 1, 2026
• liquid web / stellarwp bookit WordPress BookIt plugin <= 2.6.0.6 - Broken Access Control vulnerability CVE-2026-62019 4.3 MediumOctober 30, 2026
• liquid web / stellarwp bookit WordPress BookIt plugin <= 2.6.0.5 - Broken Access Control vulnerability CVE-2026-110900 5.3 MediumOctober 16, 2026
• stellarwp bookit — booking & appointment calendar Bookit < 2.6.0.5 - Bookit Staff+ Appointment PII Disclosure CVE-2026-89008 2.7 LowSeptember 18, 2026
• stellarwp bookit — booking & appointment calendar Bookit < 2.6.0.5 - Bookit Staff+ Arbitrary Appointment Deletion via Missing Authorization CVE-2026-89007 2.7 LowSeptember 18, 2026
• stellarwp bookit — booking & appointment calendar Bookit < 2.6.0.1 - Unauthenticated Appointment PII Disclosure via Availability Check CVE-2026-88995 5.3 MediumSeptember 13, 2026
• nexcess bookit WordPress BookIt plugin <= 2.6.0.3 - Bypass Vulnerability vulnerability CVE-2026-84767 5.3 MediumSeptember 3, 2026
• liquid web / stellarwp bookit WordPress BookIt plugin < 2.5.4.1 - Broken Authentication vulnerability CVE-2026-40780 7.5 HighJune 2, 2026
• iqonicdesign wpbookit WPBookit <= 1.0.7 - Customer Deletion via CSRF CVE-2025-12685 6.5 MediumJanuary 2, 2026
• unknown bookit Bookit < 2.5.1 – Unauthenticated Settings Update CVE-2025-12841 5.3 MediumDecember 12, 2025
• the events calendar bookit WordPress WordPress BookIt Plugin plugin <= 2.4.0 - Price Bypass Vulnerability vulnerability CVE-2024-24715 6.5 MediumMay 17, 2024