7.5
High
CVE-2026-40780 Authentication Bypass Using an Alternate Path or Channel vulnerability in Liquid Web / StellarWP BookIt allows…
Description
Authentication Bypass Using an Alternate Path or Channel vulnerability in Liquid Web / StellarWP BookIt allows Password Recovery Exploitation. This issue affects BookIt: from n/a before 2.5.4.1.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| BookIt 2.5 | earliest → < 2.5.4.1 | 2.5.4.1 |
Other CVEs of BookIt
The 4 CVEs of BookIt →
CVE-2026-62048
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Liquid Web /…
9.3
Critical
CVE-2026-62019
Missing Authorization vulnerability in Liquid Web / StellarWP BookIt bookit allows Exploiting Incorrectly Configured…
4.3
Medium
CVE-2026-110900
Missing Authorization vulnerability in Liquid Web / StellarWP BookIt bookit allows Exploiting Incorrectly Configured…
5.3
Medium