Advisories · Technology

Hakan Ozevin WP BASE Booking.

Every CVE that names Hakan Ozevin WP BASE Booking among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-118086 CVE record

CVSS 8.8 High

WordPress WP BASE Booking plugin <= 6.5.2 - Privilege Escalation vulnerability
- Hakan Ozevin WP BASE Booking
- Privilege escalation
Not analysed yet 30 Oct 2026
CVE-2026-73402 CVE record

CVSS 6.5 Medium

WordPress WP BASE Booking plugin <= 6.3.2 - Cross Site Scripting (XSS) vulnerability
- Hakan Ozevin WP BASE Booking
- Cross-site scripting (XSS)
Not analysed yet 20 Aug 2026
CVE-2026-61962 CVE record

CVSS 10.0 CriticalCritical · CVSS 9+

WordPress WP BASE Booking plugin <= 6.3.0 - Arbitrary Code Execution vulnerability
- Hakan Ozevin WP BASE Booking
- Code injection
Not analysed yet 13 Aug 2026
CVE-2026-59541 CVE record

CVSS 8.8 High

WordPress WP BASE Booking plugin <= 6.3.1 - Privilege Escalation vulnerability
- Hakan Ozevin WP BASE Booking
- Privilege escalation
Not analysed yet 23 Jul 2026
CVE-2026-39587 CVE record

CVSS 8.1 High

WordPress WP BASE Booking plugin <= 5.9.0 - Privilege Escalation vulnerability
- Hakan Ozevin WP BASE Booking
- Privilege escalation
Not analysed yet 15 Jun 2026
CVE-2025-22684 CVE record

CVSS 7.1 High

WordPress WP BASE Booking plugin <= 5.0.0 - Cross Site Scripting (XSS) vulnerability
- Hakan Ozevin WP BASE Booking
- Cross-site scripting (XSS)
Not analysed yet 3 Feb 2025