HIGH
Hakan Ozevin
CVE published 2026-07-23
CVE-2026-59541
A vulnerability in the WP BASE Booking plugin for WordPress, versions up to 6.3.1, allows for subscriber privilege escalation. This issue, tracked as CVE-2026-59541, was publicly disclosed on July 23, 2026, and last modified on October 24, 2026. The vulnerability has a CVSS score of 8.8 and is considered high severity.