| Package | Affected versions | Patched versions |
|---|---|---|
| citybook | < 2.3.4 | 2.3.4 |
| easybook | < 1.2.2 | 1.2.2 |
| townhub | < 1.0.6 | 1.0.6 |
The CTHthemes CityBook before 2.3.4, TownHub before 1.0.6, and EasyBook before 1.2.2 themes for WordPress allow nsecure Direct Object Reference (IDOR) via wp-admin/admin-ajax.php to delete any page/post/listing.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free