TI-2026-63989 CVE-2026-97248 · GHSA-72mh-3555-vj62
WordPress Booking Activities plugin <= 1.18.7.1 - PHP Object Injection vulnerability
Priority MEDIUM 49
Unauthenticated PHP Object Injection in Booking Activities <= 1.18.7.1 versions.
Booking Activities Team
Records5All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high3CVSS 7.0–8.9
Exploited now
Booking Activities Team records in CISA KEVNo Booking Activities Team vulnerabilities are listed in CISA KEV.
Records
5 records
TI-2026-22516 CVE-2026-28176 · GHSA-mc9r-rc7r-x444
WordPress Booking Activities plugin <= 1.18.4 - PHP Object Injection vulnerability
Priority MEDIUM 40
Unauthenticated PHP Object Injection in Booking Activities <= 1.18.4 versions.
TI-2025-41562 CVE-2025-67953 · GHSA-m4hg-pxfp-9fhc
WordPress Booking Activities plugin <= 1.16.44 - Privilege Escalation vulnerability
Priority LOW 37
Incorrect Privilege Assignment vulnerability in Booking Activities Team Booking Activities booking-activities allows Privilege Escalation.This issue affects Booking Activities: from n/a through <= 1.16.44.
TI-2026-28499 CVE-2026-39525 · GHSA-85jw-qgjm-2hxq
WordPress Booking Activities plugin <= 1.16.48.1 - Broken Access Control vulnerability
Priority LOW 34
Unauthenticated Broken Access Control in Booking Activities <= 1.16.48.1 versions.
TI-2024-20175 CVE-2024-30449 · GHSA-9v2j-c2x9-mg6g
WordPress Booking Activities plugin <= 1.15.19 - Cross Site Scripting (XSS) vulnerability
Priority LOW 31
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Booking Activities Team Booking Activities allows Reflected XSS.This issue affects Booking Activities: from n/a throug…