Booking Activities vulnerabilities | LiveThreat CVE Feed

Product

Booking Activities

by Booking Activities Team · last CVE Sep 30, 2026

CVEs

On KEV

9.8

Max CVSS

New 30D

Severity mix

Critical 1High 3Medium 1Low 0

Severity

Exploitation

Watch

Add Booking Activities to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2026-28176	8.8	0%	Aug 13	WordPress Booking Activities plugin <= 1.18.4 - PHP Object Injection vulnerability Affected: through 1.18.4
CVE-2025-67953	8.1	0%	Jan 22	WordPress Booking Activities plugin <= 1.16.44 - Privilege Escalation vulnerability Affected: through 1.16.44
CVE-2024-30449	7.1	0%	Mar 29	WordPress Booking Activities plugin <= 1.15.19 - Cross Site Scripting (XSS) vulnerability Affected: through 1.15.19