High · 8.8 CVE-2026-118086 EUVD-2026-114314GHSA-pxj4-565p-h4pr

WordPress WP BASE Booking plugin <= 6.5.2 - Privilege Escalation vulnerability

Published Oct 30, 2026 · Updated Oct 30, 2026 · Assigned by Patchstack

Vendor: Hakan Ozevin Product: WP BASE Booking

Description

Subscriber Privilege Escalation in WP BASE Booking <= 6.5.2 versions.

Affected products

Vendor	Product	Affected	Fixed
Hakan Ozevin	WP BASE Booking	≤ 6.5.2	—

References

https://patchstack.com/database/wordpress/plugin/wp-base-booking-of-appointments-services-and-events/vulnerability/wordpress-wp-base-booking-plugin-6-5-2-privilege-escalation-vulnerability?_s_id=cve vdb-entry