Is CVE-2026-103352 being exploited?

No public exploit is currently tracked.

How severe is CVE-2026-103352?

CVE-2026-103352 has a CVSS v3 severity of CRITICAL (9.3).

Back

CVE-2026-103352

Description

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in WP BASE WP BASE Booking wp-base-booking-of-appointments-services-and-events allows Blind SQL Injection.This issue affects WP BASE Booking: from n/a through 6.4.0.