Skip to content
Threat Feed
Subscribe

Product

Booking Calendar (<= 11.8.2)

1 brief RSS
high advisory

Booking Calendar Plugin Privilege Escalation via AJAX Parameter Injection

The Booking Calendar plugin for WordPress is vulnerable to privilege escalation (CVE-2026-92619) allowing authenticated Editors to modify arbitrary site settings and create administrative accounts.

Booking Calendar privilege-escalation wordpress web-application
1t 1c