instantCVE - vulnerability alerts, filtered to your stack

CVE-2026-119508

WordPress Radius Booking — Booking Calendar for Appointments & Services plugin <= 1.0.20 - Broken Access Control vulnerability

Published 7 Nov 2026 • Updated 7 Nov 2026

Severity: MEDIUM

5.3

CVSS Base Score

Description

Missing Authorization vulnerability in Mamunur Rashid Radius Booking — Booking Calendar for Appointments & Services radius-booking allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Radius Booking — Booking Calendar for Appointments & Services: from n/a through 1.0.20.

Affected products (1)

Mamunur Rashid Radius Booking — Booking Calendar for Appointments & Services

Problem types

Missing Authorization

References (1)

https://patchstack.com/database/wordpress/plugin/radius-booking/vulnerability/wordpress-radius-booking-booking-calendar-for-appointments-amp-services-plugin-1-0-20-broken-access-control-vulnerability?_s_id=cve

Get alerted the moment a CVE like this matches your stack.

Create a free account