high8.8
CVE-2026-118086
Subscriber Privilege Escalation in WP BASE Booking <= 6.5.2 versions.
Impact
Subscriber Privilege Escalation in WP BASE Booking <= 6.5.2 versions.
Affected products
| Product | Affected versions |
|---|---|
| WP BASE Booking | through 6.5.2 |
Versions were read from the advisory text. No structured product data has been published for this record yet.
Weakness classification
References
- NVD record
- CVE.org record
- GitHub advisory
- https://github.com/advisories/GHSA-pxj4-565p-h4pr
- https://nvd.nist.gov/vuln/detail/CVE-2026-118086
- https://patchstack.com/database/wordpress/plugin/wp-base-booking-of-appointments-services-and-events/vulnerability/wordpress-wp-base-booking-plugin-6-5-2-privilege-escalation-vulnerability?_s_id=cve