CVE-2026-61962

CriticalCVSS 10.0

Published: 13/08/2026(UTC)Updated: 14/08/2026(UTC)Translated: 13/08/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.48%

39th percentile - higher than 39% of all known CVEs

Summary

Unauthenticated Arbitrary Code Execution vulnerability in WP BASE Booking versions up to 6.3.0. An attacker can execute arbitrary code without authentication.

Risk Assessment

Risk includes full server compromise, including takeover of the website and data.

Recommendation

Update the plugin to the latest patched version. Restrict access to the admin panel and monitor logs for suspicious activities.

Original NVD description (English source)

Unauthenticated Arbitrary Code Execution in WP BASE Booking <= 6.3.0 versions.