CVE-2026-119508: WordPress Radius Booking — Booking Calendar for Appointments & Services plugin <= 1.0.20 - Broken Access Control vulnerability
Published Nov 7, 2026
·Updated
Missing Authorization vulnerability in Mamunur Rashid Radius Booking — Booking Calendar for Appointments & Services radius-booking allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Radius Booking — Booking Calendar for Appointments & Services: from n/a through 1.0.20.
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
WordPress Radius Booking — Booking Calendar for Appointments & Servicesto a version that resolves this vulnerability.Fixed in 1.0.21
Event History
Nov 7, 2026
CVE Published
via MITRE·10:19 AM
Data Sourced
via MITRE·10:19 AM
RemedyDescriptionSeverityWeakness
Frequently Asked Questions
1
Are versions later than 1.0.20 confirmed unaffected?
No. The available information identifies affected versions through 1.0.20 but does not state that any later version is fixed or unaffected.