CVE-2026-103365 | ladela Bookly Plugin up to 28.4 on WordPress Details Step getCodes phone/email information disclosure

October 10, 2026 Yanac

A vulnerability was found in ladela Bookly Plugin up to 28.4 on WordPress and classified as problematic. Affected by this vulnerability is the function BooklyFrontendComponentsBookingInfoText::getCodes of the component Details Step. Such manipulation of the argument phone/email leads to information disclosure.

This vulnerability is uniquely identified as CVE-2026-103365. The attack can be launched remotely. No exploit exists.VulDB Recent EntriesRead More