CVE-2026-66687

WpBookingly versions up to 1.3.2 are vulnerable to a Customer Cross Site Scripting (XSS) attack, which could allow an attacker to inject malicious scripts into web pages viewed by users. This vulnerability poses a risk of data theft and session hijacking, making it critical for organizations using this plugin to prioritize updates. Users and administrators of affected systems should take immediate action to mitigate potential exploitation.