45 matches found
CVE-2026-97248
Unauthenticated PHP Object Injection in Booking Activities = 1.18.7.1 versions...
CVE-2026-97248
The Booking Activities WordPress plugin in versions
CVE-2026-97248 WordPress Booking Activities plugin <= 1.18.7.1 - PHP Object Injection vulnerability
Unauthenticated PHP Object Injection in Booking Activities = 1.18.7.1 versions...
CVE-2026-97248 WordPress Booking Activities plugin <= 1.18.7.1 - PHP Object Injection vulnerability
Unauthenticated PHP Object Injection in Booking Activities = 1.18.7.1 versions...
EUVD-2026-89912
Unauthenticated PHP Object Injection in Booking Activities = 1.18.7.1 versions...
CVE-2026-97248: Deserialization of Untrusted Data
Unauthenticated PHP Object Injection in Booking Activities = 1.18.7.1 versions...
PT-2026-103244
Unauthenticated PHP Object Injection in Booking Activities = 1.18.7.1 versions...
WordPress Booking Activities plugin <= 1.18.7.1 - PHP Object Injection vulnerability
PHP Object Injection vulnerability discovered by Supakiad S. m3ez in WordPress Plugin Booking Activities versions = 1.18.7.1...
CVE-2026-28176
Unauthenticated PHP Object Injection in Booking Activities = 1.18.4 versions...
CVE-2026-28176 WordPress Booking Activities plugin <= 1.18.4 - PHP Object Injection vulnerability
Unauthenticated PHP Object Injection in Booking Activities = 1.18.4 versions...
CVE-2026-28176
CVE-2026-28176 involves the WordPress Booking Activities plugin (
CVE-2026-28176 WordPress Booking Activities plugin <= 1.18.4 - PHP Object Injection vulnerability
Unauthenticated PHP Object Injection in Booking Activities = 1.18.4 versions...
CVE-2026-28176
Unauthenticated PHP Object Injection in Booking Activities = 1.18.4 versions...
EUVD-2026-57959
Unauthenticated PHP Object Injection in Booking Activities = 1.18.4 versions...
WordPress Booking Activities plugin <= 1.18.4 - PHP Object Injection vulnerability
PHP Object Injection vulnerability discovered by Taylsec in WordPress Plugin Booking Activities versions = 1.18.4...
PT-2026-71525
Name of the Vulnerable Software and Affected Versions Booking Activities versions prior to 1.18.5 Description The Booking Activities plugin for WordPress allows unauthenticated attackers to perform PHP Object Injection through the deserialization of untrusted input. PHP Object Injection occurs wh...
CVE-2026-28176: Deserialization of Untrusted Data
Unauthenticated PHP Object Injection in Booking Activities = 1.18.4 versions...
📄 WordPress Booking Activities 1.16.43 Authentication Bypass
WordPress Booking Activities plugin version 1.16.43 contains an authentication bypass vulnerability through Login Without Password. A remote attacker can authenticate without valid credentials and access protected functionality. This proof of concept exploit demonstrates the vulnerable request fl...