CVE-2026-119508mediumCWE-862

CVE-2026-119508: medium-severity vulnerability in Mamunur Rashid Radius Booking — Booking…

WordPress Radius Booking — Booking Calendar for Appointments &amp; Services plugin <= 1.0.20 - Broken Access Control vulnerability

Published

Follow this CVE+ Monitor Radius Booking — Booking Calendar for Appointments &amp; Services

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

10Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 5.3
Missing Authorization vulnerability in Mamunur Rashid Radius Booking — Booking Calendar for Appointments &amp; Services radius-booking allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Radius Booking — Booking Calendar for Appointments &amp; Services: from n/a through 1.0.20.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
Affected products
Mamunur Rashid · Radius Booking — Booking Calendar for Appointments &amp; Services
Related CVEs — Mamunur Rashid Radius Booking — Booking…

In the same product, most dangerous first.

CVE-2026-119516CRITICALWordPress Radius Booking — Booking Calendar for Appointments & Services plugin <= 1.0.20 - PHP Object Injection vulnerabilityEPSS 0.4%