CVE-2026-84767
Deferred Deferred - Pending Action

Unauthenticated Access Bypass in BookIt <= 2.6.0.3

Publication date: 2026-09-03

Last updated on: 2026-09-03

Assigner: Patchstack

Description
Unauthenticated Bypass Vulnerability in BookIt <= 2.6.0.3 versions.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-09-03
Last Modified
2026-09-03
Generated
2026-09-03
AI Q&A
2026-09-03
EPSS Evaluated
N/A
NVD
CVE-2026-84767
EUVD
EUVD-2026-70579

Affected Vendors & Products

Showing 2 associated CPEs
Vendor Product Version / Range
bookit bookit to 2.6.0.3 (inc)
patchstack bookit to 2.6.0.3 (inc)

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-345 The product does not sufficiently verify the origin or authenticity of data, in a way that causes it to accept invalid data.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This is an unauthenticated bypass vulnerability in BookIt versions 2.6.0.3 and below. It allows unauthorized access to certain functions without requiring authentication.

Detection Guidance

To detect this vulnerability, check the installed version of the BookIt plugin. If it is version 2.6.0.3 or earlier, the system is vulnerable. Use commands like 'wp plugin list' in WordPress or inspect the plugin files for version details.

Impact Analysis

An attacker could exploit this to perform unauthorized actions in the application, potentially leading to data manipulation or exposure. The impact is limited as it does not allow code execution or full system access.

Compliance Impact

This vulnerability does not directly affect compliance with GDPR or HIPAA as it is classified as low severity with minimal impact (CVSS 5.3). It allows bypassing code restrictions but does not lead to data exposure or unauthorized access, which are key concerns for these regulations.

Mitigation Strategies

Update BookIt to the latest version (2.6.0.3 or higher) to patch the unauthenticated bypass vulnerability. If immediate update is not possible, restrict network access to the application or disable it until patched.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-84767. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart