Direct naar de inhoud
⚡ Kritieke cyberalerts voor jouw sector & systemen — direct in je inbox. Aanmelden →
cybernieuws.nl Cybersecurity en informatiebeveiling nieuws alerts live · 12 min 142 bronnen 1 vandaag
CVE's Videos Dagbriefing

← Terug naar CVE-database

CVE-2026-123064

HIGH · 8.8 CVSS Gepubliceerd: CWE-269

Beschrijving

The WP BASE Booking of Appointments, Services and Events WordPress plugin before 6.5.1 does not properly restrict access to one of its user-creation actions, allowing authenticated users with Subscriber-level access and above to create a new administrator account and thereby escalate their privileges.

References