CVE-2026-59541
Received Received - Intake

Subscriber Privilege Escalation in WP BASE Booking

Publication date: 2026-07-23

Last updated on: 2026-07-23

Assigner: Patchstack

Description
Subscriber Privilege Escalation in WP BASE Booking <= 6.3.1 versions.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-07-23
Last Modified
2026-07-23
Generated
2026-07-23
AI Q&A
2026-07-23
EPSS Evaluated
N/A
NVD
CVE-2026-59541
EUVD
EUVD-2026-48194

Affected Vendors & Products

Showing 2 associated CPEs
Vendor Product Version / Range
wp_base_booking wp_base_booking_plugin to 6.3.1 (inc)
wp_base booking to 6.3.1 (inc)

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-266 A product incorrectly assigns a privilege to a particular actor, creating an unintended sphere of control for that actor.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

CVE-2026-59541 is a Subscriber Privilege Escalation vulnerability in the WP BASE Booking plugin for WordPress, affecting versions 6.3.1 and earlier. It allows users with low-privilege accounts like Subscriber to escalate their access to higher privileges, potentially gaining full control of the website.

Detection Guidance

Check if the WP BASE Booking plugin version is 6.3.1 or earlier. Use commands like 'wp plugin list' in WordPress CLI or inspect the plugin files in /wp-content/plugins/wp-base-booking/. Look for unauthorized privilege changes in user logs.

Impact Analysis

Attackers could exploit this flaw to gain unauthorized administrative access to a WordPress site, allowing them to modify content, steal data, install malicious plugins, or take over the entire website. The high CVSS score of 8.8 indicates a severe risk of exploitation.

Mitigation Strategies

Update the WP BASE Booking plugin to version 6.3.2 or later immediately. Apply Patchstack's mitigation rule if updating is delayed. Enable auto-updates for the plugin to prevent future issues.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-59541. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart