Appointment Booking Calendar Plugin And Scheduling Plugin

1 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2026-12378 HIGH POC This Week

The Appointment Booking Calendar Plugin and Scheduling Plugin WordPress plugin through 1.1.28 does not validate data before passing it to a PHP deserialization function, allowing unauthenticated attackers to inject arbitrary PHP objects; where a suitable gadget chain is present on the site this can be leveraged to achieve remote code execution.

WordPress Deserialization RCE PHP Appointment Booking Calendar Plugin And Scheduling Plugin

NVD WPScan

CVSS 3.1

8.1

EPSS

0.2%

CVE-2026-12378

EPSS 0% CVSS 8.1

HIGH POC This Week

The Appointment Booking Calendar Plugin and Scheduling Plugin WordPress plugin through 1.1.28 does not validate data before passing it to a PHP deserialization function, allowing unauthenticated attackers to inject arbitrary PHP objects; where a suitable gadget chain is present on the site this can be leveraged to achieve remote code execution.

WordPress Deserialization RCE +2

NVD WPScan

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy