{"uuid": "5d5f284d-4996-43a8-8a47-5402b14f649e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-13424", "type": "seen", "source": "https://bsky.app/profile/suriq.io/post/3mt6sbibgd22p", "content": "The Bookly WordPress booking plugin (60k+ sites) has an unauthenticated stored XSS flaw, CVE-2026-13424.\n\nAnyone can plant a script that runs when an admin opens the plugin's logs.\n\nAffects versions up to 27.7. Update to 28.0, then check the log.", "creation_timestamp": "2026-08-16T08:44:15.033797Z"}