TI-2026-44334 CVE-2026-61962 · GHSA-pxqc-78wp-7fq7
WordPress WP BASE Booking plugin <= 6.3.0 - Arbitrary Code Execution vulnerability
Priority MEDIUM 50
Unauthenticated Arbitrary Code Execution in WP BASE Booking <= 6.3.0 versions.
Hakan Ozevin
Records6All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high4CVSS 7.0–8.9
Exploited now
Hakan Ozevin records in CISA KEVNo Hakan Ozevin vulnerabilities are listed in CISA KEV.
Records
6 records
TI-2026-83316 CVE-2026-118086 · GHSA-pxj4-565p-h4pr
Privilege escalation in WP BASE Booking WordPress plugin
Priority MEDIUM 40
Subscriber Privilege Escalation in WP BASE Booking <= 6.5.2 versions.
TI-2026-42504 CVE-2026-59541 · GHSA-mgq4-mxf3-c87g
WordPress WP BASE Booking plugin <= 6.3.1 - Privilege Escalation vulnerability
Priority MEDIUM 40
Subscriber Privilege Escalation in WP BASE Booking <= 6.3.1 versions.
TI-2026-28561 CVE-2026-39587 · GHSA-23mx-4w8p-jgwp
WordPress WP BASE Booking plugin <= 5.9.0 - Privilege Escalation vulnerability
Priority LOW 37
Unauthenticated Privilege Escalation in WP BASE Booking <= 5.9.0 versions.
TI-2025-16566 CVE-2025-22684 · GHSA-v4g5-p637-j32c
WordPress WP BASE Booking plugin <= 5.0.0 - Cross Site Scripting (XSS) vulnerability
Priority LOW 31
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Hakan Ozevin WP BASE Booking wp-base-booking-of-appointments-services-and-events allows Stored XSS.This issue affects…
TI-2026-51520 CVE-2026-73402 · GHSA-q388-9hv6-3cxg
WordPress WP BASE Booking plugin <= 6.3.2 - Cross Site Scripting (XSS) vulnerability
Priority LOW 28
Subscriber Cross Site Scripting (XSS) in WP BASE Booking <= 6.3.2 versions.