Threats tagged 'ghsa-vh4g-j777-hw5v'

A vulnerability in the WP BASE Booking of Appointments, Services and Events WordPress plugin before version 6.5.1 allows authenticated users with Subscriber-level access or higher to create new administrator accounts, leading to privilege escalation.