WP BASE Booking of Appointments, Services and Events, CVE-2026-103066

CVE, Research URL: CVE-2026-103066
Home page URL: Security reports for WP BASE Booking of Appointments, Services and Events
Application: WP BASE Booking of Appointments, Services and Events
Published on: Oct 06, 2026
Research Description: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in WP BASE WP BASE Booking wp-base-booking-of-appointments-services-and-events allows Blind SQL Injection.This issue affects WP BASE Booking: from n/a through 6.4.0.
Affected versions: max 6.5.0.
Status: vulnerable