WP BASE vulnerabilities

🔔 Create alert RSS

Published CVEs affecting WP BASE products: 2 record(s), with severity, exploitation and fixes.

WP BASE Booking 2

Exploited only (KEV) →

CVE-2026-103066 High · 8.5 CWE-89 Oct 5, 2026

WordPress WP BASE Booking plugin <= 6.4.0 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in WP BASE WP BASE Booking wp-base-booking-of-appointments-services-and-events allows Blind SQL Injection.This issue affects WP BASE Booking: from n/a through 6.4.0.

CVE-2026-103352 Critical · 9.3 CWE-89 Oct 5, 2026

WordPress WP BASE Booking plugin <= 6.4.0 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in WP BASE WP BASE Booking wp-base-booking-of-appointments-services-and-events allows Blind SQL Injection.This issue affects WP BASE Booking: from n/a through 6.4.0.