CVE-2026-92619

The Booking Calendar plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 11.8.2 via the wpbcajaxoptionsave AJAX action. The vulnerability exists because the handleajaxsave function applies per-option safeguards only to names explicitly registered via...

EUVD-2026-82729

The Booking Calendar plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 11.8.2 via the wpbcajaxoptionsave AJAX action. The vulnerability exists because the handleajaxsave function applies per-option safeguards only to names explicitly registered via...

CVE-2026-92619

The Booking Calendar plugin for WordPress (all versions up to 11.8.2 ) is vulnerable to Privilege Escalation via the wpbc_ajax_option_save AJAX action. The root cause is that handle_ajax_save() only enforces per-option safeguards for names registered via register_option_policy(); any unregistered...