CVE-2026-12378
Vulnerability Description
The Appointment Booking Calendar Plugin and Scheduling Plugin WordPress plugin through 1.1.28 does not validate data before passing it to a PHP deserialization function, allowing unauthenticated attackers to inject arbitrary PHP objects; where a suitable gadget chain is present on the site this can be leveraged to achieve remote code execution.
Vulnerability Details
Published Date
Last Modified
Source
NVD
Vendor
Unknown
Product
Appointment Booking Calendar Plugin and Scheduling Plugin
Discussion (0)
Add Comment
No comments yet. Be the first!