CVE-2025-26910

Description

References

• patchstack.com/database/Wordpress/Plugin/wpbookit/vulnerability/wordpress-wpbookit-plugin-1-0-1-cross-site-request-forgery-csrf-vulnerability · Third Party Advisory

Autres vulnérabilités de wpbookit

• CVE-2025-6058CRITIQUE 9.8The WPBookit plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the image_upload_handle() f…
• CVE-2025-6057ÉLEVÉE 8.8The WPBookit plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the handle_image_upload() f…
• CVE-2025-3811CRITIQUE 9.8The WPBookit plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 1.0.2. Th…
• CVE-2025-3810CRITIQUE 9.8The WPBookit plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 1.0.2. Th…
• CVE-2025-32254MOYENNE 5.3Missing Authorization vulnerability in Iqonic Design WPBookit wpbookit allows Accessing Functionality Not Properly Constrained by ACLs.This …