A vulnerability categorized as critical has been discovered in Booked Plugin up to 3.0.0 on WordPress. The affected element is an unknown function. Such manipulation leads to improper authentication.

This vulnerability is listed as CVE-2026-22341. The attack may be performed from remote. There is no available exploit.