Lucene search
+L
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
Assessment
Vulnerability Intelligence
Exploits
Alerts
Datasets
MCP
White Label
Security Automation SDK
MCP for AI Agents
Plans & Pricing
API Reference
Settings
Sign in
🔥 Daily Hot!
💪🏽 CPE Enhanced Advisories
🕶 Shadow Exploits
🕵🏼 Vulners CPE
🔐 Security news
💻 Exploit updates
📑 Blogs review
🐧 Linux vulnerabilities
🐞 Bugbounty
🤖 AI High Score
📰 CVE Feed
show all

44 matches found

NVD
NVD•added 2026/09/30 1:17 p.m.•10 views

CVE-2026-97248

Unauthenticated PHP Object Injection in Booking Activities = 1.18.7.1 versions...

9.8CVSS0.00386EPSS
SaveExploits0References1
CVE
CVE•added 2026/09/30 12:28 p.m.•31 views

CVE-2026-97248

The Booking Activities WordPress plugin in versions

9.8CVSS5.8AI score0.00386EPSS
SaveExploits0References1
Cvelist
Cvelist•added 2026/09/30 12:28 p.m.•35 views

CVE-2026-97248 WordPress Booking Activities plugin <= 1.18.7.1 - PHP Object Injection vulnerability

Unauthenticated PHP Object Injection in Booking Activities = 1.18.7.1 versions...

9.8CVSS0.00386EPSS
SaveExploits0References1
EUVD
EUVD•added 2026/09/30 12:28 p.m.•8 views

EUVD-2026-89912

Unauthenticated PHP Object Injection in Booking Activities = 1.18.7.1 versions...

9.8CVSS5.8AI score0.00386EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment•added 2026/09/30 12:28 p.m.•6 views

CVE-2026-97248 WordPress Booking Activities plugin <= 1.18.7.1 - PHP Object Injection vulnerability

Unauthenticated PHP Object Injection in Booking Activities = 1.18.7.1 versions...

9.8CVSS5.8AI score0.00386EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)•added 2026/09/30 12:00 a.m.•7 views

CVE-2026-97248: Deserialization of Untrusted Data

Unauthenticated PHP Object Injection in Booking Activities = 1.18.7.1 versions...

9.8CVSS5.8AI score0.00386EPSS
SaveExploits0References2
Patchstack
Patchstack•added 2026/09/28 9:57 a.m.•10 views

WordPress Booking Activities plugin <= 1.18.7.1 - PHP Object Injection vulnerability

PHP Object Injection vulnerability discovered by Supakiad S. m3ez in WordPress Plugin Booking Activities versions = 1.18.7.1...

9.8CVSS5.9AI score0.00386EPSS
SaveExploits0Affected Software1
NVD
NVD•added 2026/08/13 2:16 p.m.•14 views

CVE-2026-28176

Unauthenticated PHP Object Injection in Booking Activities = 1.18.4 versions...

8.8CVSS0.00461EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment•added 2026/08/13 1:36 p.m.•9 views

CVE-2026-28176 WordPress Booking Activities plugin <= 1.18.4 - PHP Object Injection vulnerability

Unauthenticated PHP Object Injection in Booking Activities = 1.18.4 versions...

8.8CVSS5.8AI score0.00461EPSS
SaveExploits0References1
attackerkb
attackerkb•added 2026/08/13 1:36 p.m.•17 views

CVE-2026-28176

Unauthenticated PHP Object Injection in Booking Activities = 1.18.4 versions...

8.8CVSS5.3AI score0.00461EPSS
SaveExploits0References2
EUVD
EUVD•added 2026/08/13 1:36 p.m.•14 views

EUVD-2026-57959

Unauthenticated PHP Object Injection in Booking Activities = 1.18.4 versions...

8.8CVSS5.3AI score0.00461EPSS
SaveExploits0References1
CVE
CVE•added 2026/08/13 1:36 p.m.•39 views

CVE-2026-28176

CVE-2026-28176 involves the WordPress Booking Activities plugin (

8.8CVSS5.8AI score0.00461EPSS
SaveExploits0References1
Cvelist
Cvelist•added 2026/08/13 1:36 p.m.•44 views

CVE-2026-28176 WordPress Booking Activities plugin <= 1.18.4 - PHP Object Injection vulnerability

Unauthenticated PHP Object Injection in Booking Activities = 1.18.4 versions...

8.8CVSS0.00461EPSS
SaveExploits0References1
Patchstack
Patchstack•added 2026/08/13 11:07 a.m.•12 views

WordPress Booking Activities plugin <= 1.18.4 - PHP Object Injection vulnerability

PHP Object Injection vulnerability discovered by Taylsec in WordPress Plugin Booking Activities versions = 1.18.4...

8.8CVSS5.4AI score0.00461EPSS
SaveExploits0Affected Software1
Positive Technologies
Positive Technologies•added 2026/08/13 12:00 a.m.•10 views

PT-2026-71525

Unauthenticated PHP Object Injection in Booking Activities = 1.18.4 versions...

8.8CVSS5.3AI score0.00461EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)•added 2026/08/13 12:00 a.m.•3 views

CVE-2026-28176: Deserialization of Untrusted Data

Unauthenticated PHP Object Injection in Booking Activities = 1.18.4 versions...

8.8CVSS5.7AI score0.00461EPSS
SaveExploits0References2
Packet Storm
Packet Storm•added 2026/07/21 12:00 a.m.•83 views

📄 WordPress Booking Activities 1.16.43 Authentication Bypass

WordPress Booking Activities plugin version 1.16.43 contains an authentication bypass vulnerability through Login Without Password. A remote attacker can authenticate without valid credentials and access protected functionality. This proof of concept exploit demonstrates the vulnerable request fl...

8.1CVSS5.4AI score0.00392EPSS
SaveExploits1
EUVD
EUVD•added 2026/06/15 9:30 p.m.•19 views

EUVD-2026-36958

Unauthenticated Broken Access Control in Booking Activities = 1.16.48.1 versions...

6.5CVSS5.1AI score0.00332EPSS
SaveExploits0References2
NVD
NVD•added 2026/06/15 9:16 p.m.•16 views

CVE-2026-39525

Unauthenticated Broken Access Control in Booking Activities = 1.16.48.1 versions...

6.5CVSS0.00332EPSS
SaveExploits0References1
Cvelist
Cvelist•added 2026/06/15 8:18 p.m.•43 views

CVE-2026-39525 WordPress Booking Activities plugin <= 1.16.48.1 - Broken Access Control vulnerability

Unauthenticated Broken Access Control in Booking Activities = 1.16.48.1 versions...

6.5CVSS0.00332EPSS
SaveExploits0References1
Rows per page
Query Builder