{"uuid": "b9dbda24-5179-4cc1-851f-7989bf0027ca", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-93399", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mwdkuaths22m", "content": "Bookly plugin for WordPress (\u226428.2) has a CRITICAL auth bypass (CVE-2026-93399). Unauth'd attackers can access & delete bookings. No patch \u2014 restrict plugin access & monitor for abuse. https://radar.offseq.com/threat/cve-2026-93399-cwe-639-authorization-bypass-through-user-controlled-key-in-ladel...", "creation_timestamp": "2026-09-25T10:30:28.567776Z"}