Skip to content
OpenAdvisories
Medium · 5.3 CVE-2026-119508 EUVD-2026-119091GHSA-q9pf-f78g-fhq4

WordPress Radius Booking — Booking Calendar for Appointments &amp; Services plugin <= 1.0.20 - Broken Access Control vulnerability

Published Nov 7, 2026 · Updated Nov 7, 2026 · Assigned by Patchstack

Vendor: Mamunur Rashid Product: Radius Booking — Booking Calendar for Appointments &amp; Services

Description

Missing Authorization vulnerability in Mamunur Rashid Radius Booking — Booking Calendar for Appointments &amp; Services radius-booking allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Radius Booking — Booking Calendar for Appointments &amp; Services: from n/a through 1.0.20.

Affected products

VendorProductAffectedFixed
Mamunur Rashid Radius Booking — Booking Calendar for Appointments &amp; Services ≤ 1.0.20 —

References