Search Results (2 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2026-124970 2 Wordpress-extensions, Wp Base 2 Wp Base Booking, Wp Base Booking 2026-11-14 9.3 Critical
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in WP BASE WP BASE Booking wp-base-booking-of-appointments-services-and-events allows Blind SQL Injection.This issue affects WP BASE Booking: from n/a through 6.5.2.
CVE-2026-118086 2 Hakan Ozevin, Wordpress-extensions 2 Wp Base Booking, Wp Base Booking 2026-11-12 8.8 High
Subscriber Privilege Escalation in WP BASE Booking <= 6.5.2 versions.