Connect with us

Cyber Security

Critical XSS Vulnerability Found in WordPress Bookly Plugin

Published

4 hours ago

on



High-Severity XSS Vulnerability Discovered in WordPress Bookly Plugin

Estimated Reading Time: 4 minutes

Key Takeaways

  • High-severity vulnerability: CVE-2026-5513 affects Bookly versions up to 27.2.
  • Unauthenticated exploitation: Attackers can execute stored XSS attacks without needing credentials.
  • Immediate risk mitigation: Disable the “Remember personal information in cookies” setting.
  • Urgent updates: Update to the latest version once available to secure your site.
  • Widespread impact: This vulnerability puts a range of businesses at risk, particularly in sectors reliant on appointment systems.

Context / Background

CVE-2026-5513 is categorized as a high-severity vulnerability that may lead to severe consequences for affected WordPress sites. Specifically, it exploits insufficient input sanitization and output escaping of data derived from the bookly-customer-full-name cookie. Attackers can inject persistent malicious JavaScript, which is executed in the browsers of users visiting the compromised pages.

Key Details

The vulnerability is notable for several reasons:

  • Affected Product: The vulnerability resides in the Bookly WordPress plugin versions up to 27.2.
  • Vulnerability Type: Classified as an unauthenticated stored XSS flaw (CWE-79).
  • Attack Vector: Occurs when the Bookly plugin’s configuration “Remember personal information in cookies” is enabled.
  • Conditions for Exploitation: The affected site must be running a vulnerable version of Bookly with the aforementioned setting enabled.

Impact

The implications of CVE-2026-5513 are significant, particularly considering the nature of the data handled through Bookly:

  • Risk to Businesses: Exposure of customer data can severely impact operations and user trust.
  • Unauthenticated Exploitation: Allows attackers to operate without needing credentials.
  • Administrative Access: Attackers could hijack accounts and compromise site functionality if accessed by admin users.

What’s Next

Site administrators using the Bookly plugin are advised to take immediate action:

  1. Update Bookly: Users should update to the latest patched version of the plugin as soon as it becomes available.
  2. Review Settings: Temporarily disable the “Remember personal information in cookies” setting.
  3. Monitor Site Activity: Stay vigilant for unauthorized access or changes within WordPress environments.

FAQ Section

What is CVE-2026-5513?

CVE-2026-5513 is a high-severity XSS vulnerability affecting the Bookly WordPress plugin, allowing unauthenticated attackers to execute malicious scripts.

How can I protect my site from this vulnerability?

Update to the latest version of the Bookly plugin and disable the “Remember personal information in cookies” feature to mitigate risk.

What types of attacks can occur due to this vulnerability?

Attackers can hijack accounts, steal sensitive data, and compromise site functionality.


Related Topics:
Continue Reading

Cyber Security

Critical Zero-Day Vulnerability Discovered in Palo Alto Networks Firewalls

Published

2 days ago

on

June 12, 2026

By

Estimated Reading Time: 3 minutes

Key Takeaways

  • Critical zero-day vulnerability (CVE-2026-0300) identified in Palo Alto Networks’ PAN-OS.
  • Flaw allows unauthenticated attackers to execute commands as root.
  • Active exploitation is ongoing, particularly targeting internet-exposed portals.
  • Security fixes will be released between May 13 and May 28, 2026.
  • Organizations should restrict access to vulnerable components immediately.

Context / Background

Palo Alto Networks has announced a critical zero-day vulnerability affecting its PAN-OS firewalls, which allows unauthenticated attackers to execute arbitrary commands as the root user on vulnerable devices. This major security flaw is already being actively exploited in the wild.

Details of the Vulnerability

The vulnerability stems from a buffer overflow flaw in the User-ID Authentication Portal component of PAN-OS, the operating system used on Palo Alto Networks’ PA-Series and VM-Series firewalls. This flaw permits remote, unauthenticated attackers to send specially crafted packets that enable remote code execution (RCE) with root privileges.

 

Key Details

On May 5, 2026, Palo Alto Networks internally identified the zero-day and publicly disclosed it the following day, recognizing limited exploitation at the time. By May 6, 2026, the company released a full security advisory detailing the buffer overflow vulnerability and outlining affected PAN-OS versions.

The vulnerability has a critical CVSS v4 score of 9.3, reflecting its severe impact. Additionally, shortly after the announcement, a public proof-of-concept (PoC) exploit was released, further amplifying the risks associated with this vulnerability.

Affected Devices

As specified in the advisory, only PA-Series hardware firewalls and VM-Series virtual firewalls are affected if they have the User-ID Authentication Portal enabled and susceptible configurations in place. Specifically, these devices must have an interface management profile with “response pages” enabled attached to an L3 interface that can receive untrusted or internet traffic. Affected PAN-OS versions include various releases across branches 10.2, 11.1, 11.2, and 12.1.

 

Impact

The implications of this zero-day vulnerability are significant for any organization using vulnerable Palo Alto firewalls, particularly those with publicly exposed User-ID portals. If compromised, attackers could gain complete control over the firewalls, manipulate security rules, and execute lateral movement within networks.

The attack requires no user interaction or valid credentials, posing a risk to a wide array of organizations, from large enterprises and service providers to government institutions.

In the context of India, where Palo Alto Networks’ firewalls are widely deployed in sectors such as banking, telecommunications, and government agencies, the potential for devastating breaches is pronounced. The recent disclosure points to possible exploitation by state-sponsored actors, escalating national security concerns, especially given the ongoing geopolitical tensions.

 

What’s Next

Palo Alto Networks has announced that security fixes for the vulnerability will be rolled out in stages between May 13 and May 28, 2026. Organizations are urged to monitor for updates and apply patches as soon as they are available to mitigate the risks associated with this critical vulnerability.

Furthermore, it is advisable to review the configurations of firewalls and restrict access to the User-ID Authentication Portal to trusted internal IPs or disable it entirely where feasible, ensuring that these systems remain safe from potential exploitation.

Organizations must remain vigilant and prepare for the possibility of mass exploitation, especially considering the convergence of rapid weaponization and the presence of public exploit codes available on the internet.

 

FAQ

What is the CVE number for this vulnerability?

The CVE number for this vulnerability is CVE-2026-0300.

How can organizations protect themselves?

Organizations should apply security patches as soon as they are available and restrict access to the User-ID Authentication Portal.

When will security fixes be available?

Security fixes will be rolled out in stages between May 13 and May 28, 2026.

Continue Reading

Cyber Security

Google Chrome Update Fixes 28 Security Vulnerabilities

Published

2 days ago

on

June 12, 2026

By

 

 

Estimated Reading Time: 2 minutes

Key Takeaways

  • Google’s latest update patches 28 security vulnerabilities in Chrome, including critical bugs.
  • Vulnerabilities may allow remote code execution via malicious websites.
  • The update affects users on Windows, macOS, and Linux systems.
  • Critical vulnerabilities were identified, highlighting the importance of timely updates.

Background

Browser security is paramount given the prevalence of online threats. Google’s latest update addresses vulnerabilities that could allow attackers to execute arbitrary code on users’ devices simply by enticing them to visit malicious websites. The vulnerabilities have been identified and classified with multiple critical flaws, emphasizing the urgency for users to apply the latest updates to their browsers.

Key Details

The new Chrome update, moving to version 149.0.7827.114/.115 for Windows and macOS and 149.0.7827.114 for Linux, includes several critical security fixes. Of the 28 vulnerabilities patched, many are categorized as critical, primarily due to memory corruption issues that could lead to full system compromise (Cybersecurity News).

Highlights of the vulnerabilities:

  • Use-after-free vulnerabilities were discovered in core components, including DigitalCredentials and WebMIDI, assigned CVEs such as CVE-2026-12007 and CVE-2026-12008.
  • A heap buffer overflow in the GPU component (CVE-2026-12010) and insufficient validation of untrusted input in Accessibility (CVE-2026-12009) are also notable flaws.
  • Exploiting these issues could allow attackers to run arbitrary code and potentially escape the browser’s sandbox, granting them access to control the underlying system.

The update is being gradually rolled out, with full deployment expected over days to weeks. Users can manually check for updates via Chrome’s settings to receive the new version immediately.

Impact

All users of Chrome, including those on Windows, macOS, and Linux prior to this update, are at risk. This includes sectors that rely heavily on Chrome, such as government agencies, enterprises, and small to medium-sized businesses, particularly in India where Chrome remains a dominant browser on both desktop and mobile platforms.

The exploitation of these vulnerabilities could result in significant impacts, including unauthorized program installations, data manipulation, or even the creation of new user accounts with full rights if the targeted user has administrative access. These scenarios underscore the urgency for all users to update their browsers to mitigate risks.

India Relevance

India has a substantial user base for Chrome, particularly among Android users and in various enterprises and government sectors where Chrome is the standard browser. As such, any vulnerabilities identified in the global version directly affect Indian users and organizations, increasing their risk of encountering drive-by attacks via compromised websites. Similar to how advisories are issued in other regions, Indian organizations can expect relevant alerts urging immediate updates based on this release.

What’s Next

Google’s latest Chrome update serves as a crucial reminder of the importance of maintaining browsers and applications at their latest versions to defend against security vulnerabilities. Users and organizations are encouraged to prioritize browser updates and ensure ongoing monitoring for unusual activities within their systems. This release highlights the necessity of a proactive approach to cybersecurity, especially in an increasingly digital landscape.

FAQ

What vulnerabilities are being patched in the latest Chrome update?

The latest update patches a total of 28 vulnerabilities, including critical ones that allow for remote code execution and various memory corruption issues.

How can users ensure they have the latest version of Chrome?

Users can manually check for updates via Chrome’s settings to ensure they receive the newest version, which is being gradually rolled out.

Why is it important to update the browser frequently?

Frequent updates help protect against new vulnerabilities and security threats, ensuring a safer browsing experience for all users.

 

Continue Reading

Cyber Security

Ransomware Gang Exploits Check Point VPN Vulnerability

Published

3 days ago

on

June 11, 2026

By

Ransomware Gang Exploits Check Point VPN Vulnerability, Urgent Fix Order Issued

Estimated Reading Time: 3 minutes
Key Takeaways

  • The Qilin ransomware group has exploited a Check Point VPN vulnerability, prompting urgent action from CISA.
  • CISA has mandated that U.S. federal agencies fix the vulnerability by June 11.
  • Exploitation of the vulnerability intensified significantly since May 7.
  • The incident highlights the ongoing cybersecurity threats to government infrastructure.
  • Agencies must enhance their cybersecurity measures to protect sensitive data and operations.

Context / Background

A significant cybersecurity threat has emerged as the Qilin ransomware group has effectively exploited vulnerabilities in several Check Point remote access tools, firewalls, and VPNs. These tools are widely used across government networks, making the risk particularly concerning for U.S. agencies.

Key Details

CISA issued the urgent order under its Binding Operational Directive (BOD) 22-01, which grants the agency authority to direct civilian agencies to mitigate risks when an active cyber threat is identified. This directive specifically targets U.S. civilian federal agencies, including critical departments such as Homeland Security, State, and Treasury.
Reports indicate the exploitation of the vulnerability began on May 7 and intensified significantly over the recent week. Check Point has observed attacks against “a few dozen targeted organizations globally,” highlighting the vulnerability’s scale and the urgency for remediation (TechCrunch).
CISA’s three-day deadline underscores the seriousness of the threat, as the agency perceives the risk to be urgent. This categorization of the vulnerability as an “active, in-the-wild exploit” serves as a reminder of the ongoing vulnerabilities within digital infrastructure that can be easily exploited by malicious actors.

Impact

The ramifications of this vulnerability extend beyond immediate cybersecurity concerns. The U.S. federal government agencies, which play crucial roles in national security and public safety, are now under direct threat from the Qilin ransomware gang. A successful exploitation could allow attackers initial access to internal networks, jeopardizing sensitive data and operations.
Moreover, the incident suggests potential implications for cybersecurity policies and the urgency with which federal agencies must act to protect their systems. In an increasingly digital world, the stakes for securing digital infrastructure are higher than ever, underscoring the need for robust cybersecurity measures across all sectors.
While the direct impact on India isn’t specified, the global nature of cyber threats means that vulnerabilities like these can have far-reaching consequences, potentially affecting multinational organizations and operations with ties to U.S. agencies.

What’s Next

As federal agencies scramble to comply with CISA’s directive, the primary focus will be on patching the vulnerable systems swiftly. The incident reinforces the necessity for continuous monitoring and rapid response measures within government networks, particularly related to remote access tools. Furthermore, attention will likely shift to the ongoing activity of Qilin and similar ransomware groups, prompting increased scrutiny and potential coordination among international cybersecurity entities to mitigate future risks.

FAQ Section

  • What is the vulnerability that is being exploited? The vulnerability is related to Check Point VPN and authentication-bypass issues that are being exploited by the Qilin ransomware group.
  • Who issued the urgent order for remediation? The Cybersecurity and Infrastructure Security Agency (CISA) mandating that U.S. federal agencies address the vulnerability.
  • What is the deadline for addressing the vulnerability? Agencies must fix the vulnerability by the end of the day on June 11.
  • What could happen if the vulnerability is exploited successfully? Attackers could gain initial access to internal networks, jeopardizing sensitive data and operations.
Continue Reading

Trending