PatchSiren

Hakan Ozevin CVE debriefs

These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.

HIGH Hakan Ozevin CVE published 2026-07-23

CVE-2026-59541

A vulnerability in the WP BASE Booking plugin for WordPress, versions up to 6.3.1, allows for subscriber privilege escalation. This issue, tracked as CVE-2026-59541, was publicly disclosed on July 23, 2026, and last modified on October 24, 2026. The vulnerability has a CVSS score of 8.8 and is considered high severity.