CVE Catalog
CVE-2026-39587
HighCVSS 8.1Exploitation Probability (EPSS)
Low risk0.28%
20th percentile - higher than 20% of all known CVEs
Summary
There is a vulnerability in WP BASE Booking versions up to 5.9.0 that allows unauthenticated privilege escalation.
Risk Assessment
An attacker could exploit this vulnerability to gain elevated privileges in the system, potentially leading to serious security breaches.
Recommendation
It is recommended to update WP BASE Booking to the latest version to mitigate this vulnerability.
Original NVD description (English source)
Unauthenticated Privilege Escalation in WP BASE Booking <= 5.9.0 versions.