Critical · 9.3 CVE-2026-39764 EUVD-2026-93271GHSA-frjh-c87p-5c68

WordPress Radius Booking — Booking Calendar for Appointments & Services plugin <= 1.0.19 - SQL Injection vulnerability

Published Oct 6, 2026 · Updated Oct 6, 2026 · Assigned by Patchstack

Description

Unauthenticated SQL Injection in Radius Booking — Booking Calendar for Appointments & Services <= 1.0.19 versions.

Vendor	Product	Affected	Fixed
RadiusTheme	Radius Booking — Booking Calendar for Appointments & Services	≤ 1.0.19	—