CVE-2026-91847

Bookly < 28.2 - Unauthenticated AI Assistant Conversation Disclosure and Message Injection via IDOR

The Online Scheduling and Appointment Booking System WordPress plugin before 28.2 does not verify that the requester owns the AI booking-assistant conversation named in its unauthenticated conversation actions, allowing any unauthenticated visitor to read another visitor's assistant messages and to inject messages into their in-progress conversation.

Affected

Online Scheduling and Appointment Booking System

CVSS v3.1 CNA

4.8 MEDIUMCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N

EPSS

0.22% chance of exploitation in the next 30 days, 11th percentile

Published

2026-09-19

Proof-of-concept exploits (1)

• https://wpscan.com/vulnerability/9eef3086-3a67-4ee2-bd78-e346e7b05d62/

References

• CVE Record
• NVD entry