Approved changes feed: RSS · Atom

cpe:2.3:a:hakan_ozevin:wp_base_booking:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorHakan Ozevin (967f41ce-ca2c-5535-a118-e9d9c5d2d826)
ProductWp Base Booking (e7be242e-a8e7-5dd6-8618-878150b9a951)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-61962 vulnerable 2026-09-16 04:32:44.588772 WordPress WP BASE Booking plugin <= 6.3.0 - Arbitrary Code Execution vulnerability
CRITICAL (10)
Unauthenticated Arbitrary Code Execution in WP BASE Booking <= 6.3.0 versions.
Published: 2026-08-13T13:36:41.487Z
Updated: 2026-08-13T15:26:03.760Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-59541 vulnerable 2026-07-29 01:03:17.497567 WordPress WP BASE Booking plugin <= 6.3.1 - Privilege Escalation vulnerability
HIGH (8.8)
Subscriber Privilege Escalation in WP BASE Booking <= 6.3.1 versions.
Published: 2026-07-23T11:18:20.227Z
Updated: 2026-07-23T14:25:27.109Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-39587 vulnerable 2026-07-29 00:46:19.185710 WordPress WP BASE Booking plugin <= 5.9.0 - Privilege Escalation vulnerability
HIGH (8.1)
Unauthenticated Privilege Escalation in WP BASE Booking <= 5.9.0 versions.
Published: 2026-06-15T20:18:09.322Z
Updated: 2026-06-16T12:33:13.234Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-22684 vulnerable 2026-06-08 07:10:54.622324 WordPress WP BASE Booking plugin <= 5.0.0 - Cross Site Scripting (XSS) vulnerability
HIGH (7.1)
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Hakan Ozevin WP BASE Booking wp-base-booking-of-appointments-services-and-events allows Stored XSS.This issue affects WP BASE Booking: from n/a through <= 5.0.0.
Published: 2025-02-03T14:23:51.570Z
Updated: 2026-04-28T16:11:04.337Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.