Description
Unauthenticated PHP Object Injection in Alloggio - Hotel Booking <= 2.1.2 versions.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Edge-Themes | Alloggio - Hotel Booking | ≤ 2.1.2 | — |
High · 8.1
CVE-2026-39539
EUVD-2026-37474GHSA-8hh5-4rmj-8367
WordPress Alloggio - Hotel Booking theme <= 2.1.2 - PHP Object Injection vulnerability
Published Jun 16, 2026 · Updated Jun 17, 2026 · Assigned by Patchstack