Skip to content
OpenAdvisories
Medium · 6.5 CVE-2026-119515 EUVD-2026-119991GHSA-c898-47gf-8gff

WordPress Radius Booking — Booking Calendar for Appointments & Services plugin <= 1.0.20 - Broken Access Control vulnerability

Published Nov 9, 2026 · Updated Nov 9, 2026 · Assigned by Patchstack

Description

Missing Authorization vulnerability in Mamunur Rashid Radius Booking — Booking Calendar for Appointments &amp; Services radius-booking allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Radius Booking — Booking Calendar for Appointments &amp; Services: from n/a through 1.0.20.

Affected products

VendorProductAffectedFixed
Mamunur Rashid Radius Booking — Booking Calendar for Appointments &amp; Services ≤ 1.0.20 —

References