CVE-2026-57747: Themerex Booked

Medium severity, CVSS 6.5. EPSS: 0.2% chance of exploitation in the next 30 days.

Unauthenticated Cross Site Request Forgery (CSRF) in Booked <= 3.0.0 versions.

Affected products

• Themerex Booked: up to and including 3.0.0

Published 2026-07-02. Last modified 2026-07-02.