PLUGIN SECURITY
Is WP BASE Booking of Appointments, Services and Events safe?
Known vulnerabilities, PHP compatibility and safer alternatives for the WP BASE Booking of Appointments, Services and Events WordPress plugin — checked against WP Clinic's local security database.
What this plugin does
- Slug:
wp-base-booking-of-appointments-services-and-events
Maintenance status
Known vulnerabilities
12 known CVEs on file for WP BASE Booking of Appointments, Services and Events.
| CVE | Vulnerability | Type | Severity | Affected | Fixed in | Published | Status |
|---|---|---|---|---|---|---|---|
| CVE-2026-123064 | WP BASE Booking of Appointments, Services and Events [wp-base-booking-of-appointments-services-and-events] < 6.5.1 | Improper Privilege Management | Unknown | 6.5.0–6.5.1 | 6.5.1 | 2026-10-30 | — |
| CVE-2026-103352 | WP BASE Booking of Appointments, Services and Events [wp-base-booking-of-appointments-services-and-events] < 6.5.0 | — | Critical 9.3 | < 6.5.0 | 6.5.0 | 2026-10-03 | — |
| CVE-2026-103066 | WP BASE Booking of Appointments, Services and Events [wp-base-booking-of-appointments-services-and-events] < 6.5.0 | — | High 8.5 | < 6.5.0 | 6.5.0 | 2026-10-03 | — |
| CVE-2026-118086 | WP BASE Booking of Appointments, Services and Events [wp-base-booking-of-appointments-services-and-events] <= 6.5.2 (unfixed) | Incorrect Privilege Assignment | High 8.8 | < 6.6.1 | 6.6.1 | 2026-10-03 | — |
| CVE-2026-73402 | WP BASE Booking of Appointments, Services and Events [wp-base-booking-of-appointments-services-and-events] < 6.4.0 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | Medium 6.5 | < 6.4.0 | 6.4.0 | 2026-08-20 | — |
| CVE-2026-61962 | WP BASE Booking of Appointments, Services and Events [wp-base-booking-of-appointments-services-and-events] < 6.3.1 | Improper Control of Generation of Code ('Code Injection') | Critical 10.0 | < 6.3.1 | 6.3.1 | 2026-07-22 | — |
| CVE-2026-39587 | WP BASE Booking of Appointments, Services and Events [wp-base-booking-of-appointments-services-and-events] < 6.0.0 | Incorrect Privilege Assignment | High 8.1 | < 6.0.0 | 6.0.0 | 2026-04-08 | — |
| CVE-2024-12737 | WP BASE Booking of Appointments, Services and Events [wp-base-booking-of-appointments-services-and-events] < 5.0.0 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | Medium 6.1 | < 5.0.0 | 5.0.0 | 2025-02-05 | — |
+ 5 more known vulnerabilities
| CVE | Vulnerability | Type | Severity | Affected | Fixed in | Published | Status |
|---|---|---|---|---|---|---|---|
| CVE-2025-22684 | WP BASE Booking of Appointments, Services and Events [wp-base-booking-of-appointments-services-and-events] < 5.1.0 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | High 7.1 | < 5.1.0 | 5.1.0 | 2025-01-31 | — |
| CVE-2024-12558 | WP BASE Booking of Appointments, Services and Events [wp-base-booking-of-appointments-services-and-events] < 5.0.0 | Missing Authorization | Medium 6.5 | < 5.0.0 | 5.0.0 | 2024-12-20 | — |
| CVE-2024-12469 | WP BASE Booking of Appointments, Services and Events [wp-base-booking-of-appointments-services-and-events] < 4.9.2 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | Medium 6.1 | < 4.9.2 | 4.9.2 | 2024-12-16 | — |
| — | WP BASE Booking of Appointments, Services and Events [wp-base-booking-of-appointments-services-and-events] < 6.3.2 | — | Unknown | < 6.3.2 | 6.3.2 | 0000-00-00 | — |
| CVE-2026-59541 | WP BASE Booking of Appointments, Services and Events < 6.3.2 - Subscriber+ Privilege Escalation | — | Unknown | < 6.3.2 | 6.3.2 | — | — |
How to fix it
Update this plugin to the latest release from wordpress.org — each CVE above lists the exact release that fixed it ("Fixed in") when one is on file.
This is the plugin's full known vulnerability history, not a scan of any specific installation — run a free scan of your own site to check your exact installed version.
Check your own WordPress site
Run a free passive scan now, or create a free account and install the WP Clinic plugin for a deep scan of your whole hosting account and AI-assisted repair.