WP BASE Booking of Appointments, Services and Events vulnerabilities
We track 1 vulnerability in WP BASE Booking of Appointments, Services and Events products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on November 9, 2026.
1vulnerabilities
0critical
1high
0exploited
8.8average CVSS score
Latest WP BASE Booking of Appointments, Services and Events vulnerabilities
- 8.8 High severity
WP BASE Booking of Appointments, Services and…: Improper Privilege Management
The WP BASE Booking of Appointments, Services and Events WordPress plugin before 6.5.1 does not properly restrict access to one of its user-creation actions, allowing authenticated users with Subscriber-level access and above to create a new administrator acco