Advisories · Technology

Booking Activities.

Every CVE that names Booking Activities among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-97248 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

WordPress Booking Activities plugin <= 1.18.7.1 - PHP Object Injection vulnerability
- Booking Activities
- Insecure deserialization
Not analysed yet 30 Sept 2026
CVE-2026-28176 CVE record

CVSS 8.8 High

WordPress Booking Activities plugin <= 1.18.4 - PHP Object Injection vulnerability
- Booking Activities
- Insecure deserialization
Not analysed yet 13 Aug 2026
CVE-2026-39525 CVE record

CVSS 6.5 Medium

WordPress Booking Activities plugin <= 1.16.48.1 - Broken Access Control vulnerability
- Booking Activities
- Broken access control
Not analysed yet 15 Jun 2026
CVE-2025-67953 CVE record

CVSS 8.1 High

WordPress Booking Activities plugin <= 1.16.44 - Privilege Escalation vulnerability
- Booking Activities
- Privilege escalation
Not analysed yet 22 Jan 2026
CVE-2024-30449 CVE record

CVSS 7.1 High

WordPress Booking Activities plugin <= 1.15.19 - Cross Site Scripting (XSS) vulnerability
- Booking Activities
- Cross-site scripting (XSS)
Not analysed yet 29 Mar 2024