TI-2026-83316 CVE-2026-118086 · GHSA-pxj4-565p-h4pr
Privilege escalation in WP BASE Booking WordPress plugin
Priority MEDIUM 40
Subscriber Privilege Escalation in WP BASE Booking <= 6.5.2 versions.
Vulnerabilities
6 records
TI-2026-51520 CVE-2026-73402 · GHSA-q388-9hv6-3cxg
WordPress WP BASE Booking plugin <= 6.3.2 - Cross Site Scripting (XSS) vulnerability
Priority LOW 28
Subscriber Cross Site Scripting (XSS) in WP BASE Booking <= 6.3.2 versions.
TI-2026-44334 CVE-2026-61962 · GHSA-pxqc-78wp-7fq7
WordPress WP BASE Booking plugin <= 6.3.0 - Arbitrary Code Execution vulnerability
Priority MEDIUM 50
Unauthenticated Arbitrary Code Execution in WP BASE Booking <= 6.3.0 versions.
TI-2026-42504 CVE-2026-59541 · GHSA-mgq4-mxf3-c87g
WordPress WP BASE Booking plugin <= 6.3.1 - Privilege Escalation vulnerability
Priority MEDIUM 40
Subscriber Privilege Escalation in WP BASE Booking <= 6.3.1 versions.
TI-2026-28561 CVE-2026-39587 · GHSA-23mx-4w8p-jgwp
WordPress WP BASE Booking plugin <= 5.9.0 - Privilege Escalation vulnerability
Priority LOW 37
Unauthenticated Privilege Escalation in WP BASE Booking <= 5.9.0 versions.
TI-2025-16566 CVE-2025-22684 · GHSA-v4g5-p637-j32c
WordPress WP BASE Booking plugin <= 5.0.0 - Cross Site Scripting (XSS) vulnerability
Priority LOW 31
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Hakan Ozevin WP BASE Booking wp-base-booking-of-appointments-services-and-events allows Stored XSS.This issue affects…