CVE-2026-28176
WordPress Booking Activities plugin <= 1.18.4 - PHP Object Injection vulnerability
Unauthenticated PHP Object Injection in Booking Activities <= 1.18.4 versions.
CVSS 3.1 · 8.8 High
EPSS < 1%
KEV · Not listed
Vendors
Products