Cookie-Injection

Form Notify WordPress Plugin — LINE OAuth Authentication Bypass to Account Takeover (CVE-2026-5229) newCVE-2026-5229webCRITICAL 9.8Patched2026-07-05Bookly Booking Form Cookie-Based Stored XSS — CVE-2026-5513 newCVE-2026-5513webHIGH 7.2Patched2026-07-05