CVE Catalog
CVE-2026-28161
HighCVSS 8.8Exploitation Probability (EPSS)
Low risk0.39%
32th percentile - higher than 32% of all known CVEs
Summary
Service Finder Booking plugin versions up to 6.2 contain a Subscriber Privilege Escalation vulnerability. A user with subscriber role can gain higher privileges.
Risk Assessment
The risk includes privilege escalation, potentially leading to unauthorized access to administrative functions and security compromise.
Recommendation
Update the Service Finder Booking plugin to the latest version that fixes the privilege escalation issue.
Original NVD description (English source)
Subscriber Privilege Escalation in Service Finder Booking <= 6.2 versions.