CVE-2026-103352

Name of the Vulnerable Software and Affected Versions WP BASE Booking versions prior to 6.4.1

Description An issue exists where improper neutralization of special elements used in an SQL command allows for Blind SQL Injection. This occurs due to insufficient escaping of user-supplied parameters and a lack of sufficient preparation of the SQL query. Unauthenticated attackers can append additional SQL queries to existing ones to extract sensitive information from the database.

Recommendations Update to a version newer than 6.4.0.