Booking Hub <= 1.3.1 - Authenticated (Subscriber+) Privilege Escalation
medium
The Booking Hub plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 1.3.1. This is due to insufficient restriction on the capabilities a user may grant themselves. This makes it possible for authenticated attackers, with subscriber-level access and above, to elevate their pr...
- CVSS:
- 6.3
(Wordfence)
- Affected:
- up to 1.3.1
- Fix:
- No patched version reported
- Disclosed:
- Sep 1, 2026
CVE-2026-81769 on NVD →
Booking Hub - AI-Powered Scheduling, Reservation and Appointment System for WordPress <= 1.3.0 - Authenticated (Subscriber+) Privilege Escalation
medium
The Booking Hub - AI-Powered Scheduling, Reservation and Appointment System for WordPress plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 1.3.0. This is due to insufficient restriction on the capabilities a user may grant themselves. This makes it possible for authentica...
- CVSS:
- 6.3
(Wordfence)
- Affected:
- up to 1.3.0
- Fix:
- No patched version reported
- Disclosed:
- Aug 24, 2026
CVE-2026-32561 on NVD →
Protect your WordPress site
Run a free security scan to detect vulnerable plugins and themes, exposed files, and malware — no plugin install, no signup.
Scan your site free
← Back to the vulnerability database