WordPress WP BASE Booking plugin <= 6.5.2 - Privilege Escalation vulnerability

Summary

Subscriber Privilege Escalation in WP BASE Booking <= 6.5.2 versions.

Remediation

1. Inventory every Hakan Ozevin WP BASE Booking deployment, including staging.
2. No fixed version appears in the public sources yet. Check the references below and the vendor directly.

References

• Referencehttps://patchstack.com/database/wordpress/plugin/wp-base-booking-of-appointments-services-and-events/vulnerability/wordpress-wp-base-booking-plugin-6-5-2-privilege-escalation-vulnerability?_s_id=cve