CVE-2026-119516Critical· 9.8▾ MidnightDeserialization of Untrusted Data vulnerability in Mamunur Rashid Radius Booking — Booking Calendar for Appointments & Services radius-booking allows Object Injection.This issue affects Radius Booking — Booking Calendar for Appointme…
▾ Midnight zone — Critical, or high with PoC / in-the-wild
impact 53.9 · likelihood 0.1 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Exploit-prediction probability, daily snapshots since Nov 6.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via CVEORG
0.4%
Deserialization of Untrusted Data vulnerability in Mamunur Rashid Radius Booking — Booking Calendar for Appointments & Services radius-booking allows Object Injection.This issue affects Radius Booking — Booking Calendar for Appointments & Services: from n/a through 1.0.20.
radius-booking <= 1.0.20Update the WordPress Radius Booking — Booking Calendar for Appointments & Services plugin to the latest available version (at least 1.0.21).
Connected by shared product, vendor, weakness, or advisory.
CVE-2026-119508Medium· 5.3WordPress Radius Booking — Booking Calendar for Appointments & Services plugin <= 1.0.20 - Broken Access Control vulnerability
CVE-2026-39764Critical· 9.3Unauthenticated SQL Injection in Radius Booking — Booking Calendar for Appointments & Services <= 1.0.19 versions.
CVE-2026-54871Medium· 5.3WordPress ShopBuilder – Elementor WooCommerce Builder Addons plugin <= 3.4.2 - Broken Access Control vulnerability
CVE-2026-56056Medium· 6.5WordPress The Post Grid plugin <= 7.9.7 - Cross Site Scripting (XSS) vulnerability
CVE-2026-111828Medium· 4.3WordPress Classified Listing plugin <= 6.1.5 - Direct static code injection vulnerability
CVE-2025-15438Medium· 4.7A vulnerability was determined in PluXml up to 5.8.22