CVE-2026-39587: Hakan Ozevin WP BASE Booking, заобикаляне на вход и

Описание

Оригинално описание

Unauthenticated Privilege Escalation in WP BASE Booking <= 5.9.0 versions.

Засегнати продукти

• Hakan Ozevin WP BASE Booking: n/a до 5.9.0

Вид слабост

• CWE-266 Неправилно задаване на привилегии

История

Други уязвимости в Hakan Ozevin WP BASE Booking

• 8.8CVE-2026-118086
• 6.5CVE-2026-73402
• 10.0CVE-2026-61962
• 8.8CVE-2026-59541
• 7.1CVE-2025-22684

Първоизточници

• https://www.cve.org/CVERecord?id=CVE-2026-39587
• https://nvd.nist.gov/vuln/detail/CVE-2026-39587
• https://patchstack.com/database/wordpress/plugin/wp-base-booking-of-appointments-services-and-events/vulnerability/wordpress-wp-base-booking-plugin-5-9-0-privilege-escalation-vulnerability?_s_id=cve