Skip to content
OpenAdvisories
Critical · 9.8 CVE-2026-119516 EUVD-2026-117999GHSA-g7w9-6f5v-35q7

WordPress Radius Booking — Booking Calendar for Appointments & Services plugin <= 1.0.20 - PHP Object Injection vulnerability

Published Nov 6, 2026 · Updated Nov 7, 2026 · Assigned by Patchstack

Description

Deserialization of Untrusted Data vulnerability in Mamunur Rashid Radius Booking — Booking Calendar for Appointments &amp; Services radius-booking allows Object Injection.This issue affects Radius Booking — Booking Calendar for Appointments &amp; Services: from n/a through 1.0.20.

Affected products

VendorProductAffectedFixed
Mamunur Rashid Radius Booking — Booking Calendar for Appointments &amp; Services ≤ 1.0.20 —

References