https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-11-11T11:48:53.625390+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/cve-2026-123064 CVE-2026-123064 — WP BASE Booking of Appointments, Services and Events 6.5.0 - Subscriber+ Privilege Escalation 2026-11-11T11:48:53.626586+00:00

Affected: Unknown WP BASE Booking of Appointments, Services and Events

The WP BASE Booking of Appointments, Services and Events WordPress plugin before 6.5.1 does not properly restrict access to one of its user-creation actions, allowing authenticated users with Subscriber-level access and above to create a new administrator account and thereby escalate their privileges.