CVE-2026-16062

CVE-2026-16062 affects the WordPress plugin “Event Booking Manager for WooCommerce” versions prior to 5.3.7. The issue is deserialization of user-controlled input in certain event content fields, allowing users with Contributor-level access and above to inject PHP objects. The plugin itself has n...