Online Scheduling and Appointment Booking System – Bookly

How well this listing is tuned to rank in WordPress.org search, on the factors an owner controls. Not popularity, optimization.

Directory rank vs rivals

wp.org popularity rank over time · higher is better · when a rival's line climbs above yours, they've overtaken you

How often this plugin actually ships. A steady rhythm is the maintenance signal a single "last updated" date can't show.

Share of active installs on each version of this plugin. Green is the current release; a big slice on older versions is a user base that has stopped updating.

Refined from the date this plugin crossed into its current band.

No paid tier is visible, so we don't put a figure on revenue or sale value: that would be guessing. The install base is a real asset to an acquirer, just not one public data lets us price.

1. ★★★★★ kuehyunpark

   3mo ago

   2015년부터 작은 사이트를 운영하면서 Bookly Pro 와 여러 유료 플러그인을 구입해서 사용하고 있습니다. 무엇보다 쉽게 사용할 수 있고, 사용자 환경에 맞추어 커스텀이 가능하다는 점 그리고 고객응대 서비스가 좋다는 점을 말씀드리고 싶습니다. 얼마전에 플러그인 업데이트가 되면서 문제가 발생했었는데 티켓을 등록했더니 담당자가 직접 접속해서 해결해 주었습니다. 한국에서 사용하시는 분들이 별로 없는 것 같아서 일부러 한글로 리뷰를 남깁니다.

   Read on wp.org ↗
2. ★★★★★ roudsonmedine

   3mo ago

   bien

   Read on wp.org ↗
3. ★★★★★ medsclinic

   4mo ago

   Had a bit trouble using BOOKLY after migrating website from previous host. Shared the problem and it was resoved within 30minute.

   Read on wp.org ↗
4. ★★★★★ orenziv

   4mo ago

   Bookly is one of the most complete appointment booking plugins available for WordPress, and after working with several scheduling systems, it stands out as a powerful and flexible solution for service-based businesses. What makes Bookly particularly strong is its high level of customization. The booking form can be fully adapted—steps can be added or removed, fields customized, and even the design adjusted to match your brand . This makes it suitable for clinics, therapists, consultants, and any business that needs a professional booking flow. From a functionality standpoint, Bookly offers everything needed in one system: Online booking and calendar managementAutomated reminders (email/SMS)Payment integrations and depositsMulti-staff and multi-service scheduling It’s especially effective for businesses with more complex setups, like multiple practitioners or locations, where it handles availability and scheduling in a structured way . However, there are a few important downsides to consider: Many advanced features require paid add-ons, which can increase the total cost significantlyThe system can feel slightly complex for beginners, especially during setupSupport quality is sometimes inconsistent depending on the issue Overall, Bookly is not the simplest plugin—but it is one of the most powerful. If you are serious about running a professional booking system inside WordPress and want full control over your data and workflow, it’s an excellent choice. Final verdict:A robust, scalable booking solution best suited for professionals who want flexibility and are willing to invest a bit of time (and possibly money) to get the most out of it.

   Read on wp.org ↗
5. ★★★★★ stistko

   4mo ago

   I can highly recommend this booking system. Their support and problem-solving are very fast.

   Read on wp.org ↗
6. ★★★★★ Ahsan Waqas

   4mo ago

   Customer support is outstanding.

   Read on wp.org ↗
7. ★★★★★ pariscoiff

   4mo ago

   fonctionne bien dans notre salon de coiffure ! Je conseille

   Read on wp.org ↗
8. ★★★★★ gansado59

   4mo ago

   Excelente plugin. Funciona de maravilla en versión gratuita, por tanto, entiendo que la versión de pago será superior. Detectado un problema de funcionamiento en mi instalación, fué resuelto en pocas horas por su servicio técnico. El soporte es excepcionalmente rápido y resolutivo. Absolutamente recomendable.

   Read on wp.org ↗

18 disclosed vulnerabilities on record for this plugin, all fixed in the current version. Sites on older versions stay exposed until they update.

1. High · 7.2 Online Scheduling and Appointment Booking System <= 27.7 - Unauthenticated Stored Cross-Site Scripting via bookly_speed_up_update_addons AJAX action ↗
   2026-08-15 CVE-2026-13424 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 27.7 Patched in 28.0
2. Medium · 4.3 Online Scheduling and Appointment Booking System – Bookly <= 27.7 - Authenticated (Staff+) Insecure Direct Object Reference to Sensitive Information Exposure via 'params[id]' Parameter ↗
   2026-08-15 CVE-2026-12905 Authorization Bypass Through User-Controlled Key Affects <= 27.7 Patched in 28.0
3. High · 7.5 Online Scheduling and Appointment Booking System – Bookly < 27.8 - Unauthenticated SQL Injection ↗
   2026-08-03 CVE-2026-13395 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Affects < 27.8 Patched in 27.8
4. High · 7.5 Online Scheduling and Appointment Booking System <= 27.7 - Unauthenticated SQL Injection ↗
   2026-07-27 CVE-2026-14516 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Affects <= 27.7 Patched in 27.8
5. High · 7.2 Online Scheduling and Appointment Booking System – Bookly <= 27.7 - Unauthenticated Stored Cross-Site Scripting ↗
   2026-07-16 CVE-2026-61944 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 27.7 Patched in 27.8
6. High · 7.5 Online Scheduling and Appointment Booking System – Bookly <= 27.7 - Unauthenticated SQL Injection ↗
   2026-07-16 CVE-2026-61949 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Affects <= 27.7 Patched in 27.8
7. High · 7.2 Online Scheduling and Appointment Booking System – Bookly <= 27.2 - Unauthenticated Stored Cross-Site Scripting via 'bookly-customer-full-name' Cookie ↗
   2026-06-12 CVE-2026-5513 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 27.2 Patched in 27.3
8. Medium · 5.3 Online Scheduling and Appointment Booking System – Bookly <= 27.4 - Unauthenticated Information Exposure ↗
   2026-05-10 CVE-2026-42667 Exposure of Sensitive Information to an Unauthorized Actor Affects <= 27.4 Patched in 27.5
9. Medium · 5.3 Online Scheduling and Appointment Booking System – Bookly <= 27.0 - Unauthenticated Price Manipulation via 'tips' ↗
   2026-04-08 CVE-2026-2519 External Control of Assumed-Immutable Web Parameter Affects <= 27.0 Patched in 27.1
10. Medium · 6.1 Online Scheduling and Appointment Booking System – Bookly <= 26.7 - Reflected Cross-Site Scripting ↗
    2026-03-20 CVE-2026-32540 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 26.7 Patched in 26.8
11. Medium · 6.4 WordPress Online Booking and Scheduling Plugin – Bookly <= 23.2 - Authenticated (Subscriber+) Stored Cross-Site Scripting via Color Profile Parameter ↗
    2024-06-10 CVE-2024-5584 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 23.2 Patched in 23.3
12. Medium · 4.4 WordPress Online Booking and Scheduling Plugin – Bookly <= 22.4.1 - Authenticated (Admin+) Stored Cross-Site Scripting ↗
    2023-11-06 CVE-2023-5209 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 22.4.1 Patched in 22.5
13. Medium · 6.6 Bookly <= 22.3.1 - Authenticated(Administrator+) SQL Injection ↗
    2023-09-25 CVE-2023-4691 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Affects <= 22.3.1 Patched in 22.4
14. Medium · 4.0 Bookly <= 21.7 - Authenticated (Admin+) Stored Cross-Site Scripting ↗
    2023-06-01 CVE-2023-1159 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects 21.7 Patched in 21.8
15. High · 8.1 Bookly <= 21.7.1 - Arbitrary File Deletion ↗
    2023-05-11 CVE-2023-26526 Missing Authorization Affects <= 21.7.1 Patched in 21.8
16. High · 7.2 Bookly <= 21.5 - Unauthenticated Stored Cross-Site Scripting via Name ↗
    2023-03-17 CVE-2023-1172 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects 21.5 Patched in 21.5.1
17. Medium · 5.4 Bookly <= 20.3 - Staff Member Stored Cross-Site Scripting ↗
    2021-11-08 CVE-2021-24930 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 20.3 Patched in 20.3.1
18. High · 7.2 WordPress Online Booking and Scheduling Plugin – Bookly <= 14.5 - Cross-Site Scripting ↗
    2018-02-10 CVE-2018-6891 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 14.5 Patched in 14.6

Automated install-time checks, tested on PHP 8.1.12 · WP 7.0.1

Translated into 12 languages, 8 at 90% or more

Growth timeline

Install-tier crossings we have observed, and how long each tier took to outgrow

1. 2026-06-15 70K+ → 60K+ down after 1105 days in tier
2. 2023-06-06 60K+ → 70K+ up

Competes with

The plugins that solve the same job, ranked by shared tags then reach, closest match first. The letter on the right is each plugin's health grade (A best, F worst).

• Time Slot – Booking and Appointment System 100+ installs · 4.2★ · 5 shared tags A
• Appointment Booking Plugin – LatePoint | Calendar & Scheduling for WordPress 100K+ installs · 4.8★ · 4 shared tags A
• Simply Schedule Appointments 50K+ installs · 4.9★ · 4 shared tags A
• Fluent Booking – The Ultimate Appointments Scheduling, Events Booking, Events Calendar Solution 20K+ installs · 4.5★ · 4 shared tags A
• Advanced Appointment Booking & Scheduling 3K+ installs · 3.6★ · 4 shared tags B
• Easy Booked – Appointment Booking and Scheduling Management System for WordPress 100+ installs · 4.1★ · 4 shared tags C

Embed this report card

Drop a live Pulse card for Online Scheduling and Appointment Booking System – Bookly into a readme, a review or a deck. It updates itself.

Online Scheduling and Appointment Booking System – Bookly: 60K+ active installs, 4.4★ (575 reviews). Plugin Pulse (WP Mayor), as of 2026-08-25. https://plugins.wpmayor.com/plugin/bookly-responsive-appointment-booking-tool