CVE-2026-39764
WordPress Radius Booking — Booking Calendar for Appointments & Services plugin <= 1.0.19 - SQL Injection vulnerability
Unauthenticated SQL Injection in Radius Booking — Booking Calendar for Appointments & Services <= 1.0.19 versions.
CVSS 3.1 · 9.3 Critical
EPSS < 1%
KEV · Not listed
Vendors
Products