Description
Unauthenticated Broken Access Control in Booking Activities <= 1.16.48.1 versions.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Booking Activities Team | Booking Activities | ≤ 1.16.48.1 | — |
Medium · 6.5
CVE-2026-39525
EUVD-2026-36958GHSA-85jw-qgjm-2hxq
WordPress Booking Activities plugin <= 1.16.48.1 - Broken Access Control vulnerability
Published Jun 15, 2026 · Updated Jun 16, 2026 · Assigned by Patchstack