Booking Activities Team vulnerabilities

🔔 Create alert RSS

Published CVEs affecting Booking Activities Team products: 4 record(s), with severity, exploitation and fixes.

Booking Activities 4

Exploited only (KEV) →

CVE-2026-97248 Critical · 9.8 CWE-502 Sep 30, 2026

WordPress Booking Activities plugin <= 1.18.7.1 - PHP Object Injection vulnerability

Unauthenticated PHP Object Injection in Booking Activities <= 1.18.7.1 versions.

CVE-2026-28176 High · 8.8 CWE-502 Aug 13, 2026

WordPress Booking Activities plugin <= 1.18.4 - PHP Object Injection vulnerability

Unauthenticated PHP Object Injection in Booking Activities <= 1.18.4 versions.

CVE-2026-39525 Medium · 6.5 CWE-862 Jun 15, 2026

WordPress Booking Activities plugin <= 1.16.48.1 - Broken Access Control vulnerability

Unauthenticated Broken Access Control in Booking Activities <= 1.16.48.1 versions.

CVE-2025-67953 High · 8.1 CWE-266 Jan 22, 2026

WordPress Booking Activities plugin <= 1.16.44 - Privilege Escalation vulnerability

Incorrect Privilege Assignment vulnerability in Booking Activities Team Booking Activities booking-activities allows Privilege Escalation.This issue affects Booking Activities: from n/a through <= 1.16.44.