CVE-2026-59541 WordPress WP BASE Booking plugin <= 6.3.1 - Privilege Escalation vulnerability

🗓️ 23 Jul 2026 11:18:20Reported by PatchstackType

Subscriber privilege escalation in WordPress WP Base Booking plugin up to version 6.3.1.

Reporter	Title	Published	Views	Family All 5
CVE	CVE-2026-59541	23 Jul 202611:18	–	cve
EUVD	EUVD-2026-48194	23 Jul 202611:18	–	euvd
NVD	CVE-2026-59541	23 Jul 202612:18	–	nvd
Positive Technologies	PT-2026-63852	23 Jul 202600:00	–	ptsecurity
Vulnrichment	CVE-2026-59541 WordPress WP BASE Booking plugin <= 6.3.1 - Privilege Escalation vulnerability	23 Jul 202611:18	–	vulnrichment

[
  {
    "vendor": "Hakan Ozevin",
    "collectionURL": "https://wordpress.org/plugins",
    "defaultStatus": "unaffected",
    "packageName": "wp-base-booking-of-appointments-services-and-events",
    "product": "WP BASE Booking",
    "versions": [
      {
        "lessThanOrEqual": "6.3.1",
        "status": "affected",
        "version": "n/a",
        "versionType": "custom",
        "changes": [
          {
            "at": "6.3.2",
            "status": "unaffected"
          }
        ]
      }
    ]
  }
]

Source	Link
patchstack	www.patchstack.com/database/wordpress/plugin/wp-base-booking-of-appointments-services-and-events/vulnerability/wordpress-wp-base-booking-plugin-6-3-1-privilege-escalation-vulnerability

23 Jul 2026 11:18Current

CVSS 3.18.8

CWE-266