CVE-2026-104898 | ladela Bookly Plugin up to 28.4 on WordPress id/wp_user_id resource injection

October 10, 2026 Yanac

A vulnerability has been found in ladela Bookly Plugin up to 28.4 on WordPress and classified as critical. Affected is an unknown function. This manipulation of the argument id/wp_user_id causes improper control of resource identifiers.

This vulnerability is handled as CVE-2026-104898. The attack can be initiated remotely. There is not any exploit available.VulDB Recent EntriesRead More