LIVE GLOBAL MONITOR: 1 JURISDICTION ACTIVE

Oct 20, 2026 · 17:59 UTC SEARCH

HACKCURRENT Cybersecurity Intelligence

HIGH

Vulnerability intelligence

CVE-2026-78257

Published September 3, 2026

CVSS 3.18.8

SeverityHigh

Known exploitedNo

Contributor PHP Object Injection in Booking and Rental Manager <= 2.7.5 versions.

NVD references:

https://patchstack.com/database/wordpress/plugin/booking-and-rental-manager-for-woocommerce/vulnerability/wordpress-booking-and-rental-manager-plugin-2-7-5-php-object-injection-vulnerability?_s_id=cve

Primary source: NIST National Vulnerability Database