CVE-2021-36852

概要

参考情報

• patchstack.com/database/vulnerability/wp-hotel-booking/wordpress-wp-hotel-booking-plugin-1-10-5-cross-site-request-forgery-csrf-vulnerability · Third Party Advisory
• wordpress.org/plugins/wp-hotel-booking · Product

wp hotel booking のその他の脆弱性

• CVE-2024-13447中 4.3The WP Hotel Booking plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the hotel_bookin…
• CVE-2024-12370中 5.3The WP Hotel Booking plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check when adding r…
• CVE-2024-51582高 8.8Path Traversal: '.../...//' vulnerability in ThimPress WP Hotel Booking wp-hotel-booking allows PHP Local File Inclusion.This issue affects …
• CVE-2024-7855高 8.8The WP Hotel Booking plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the update_review()…
• CVE-2024-3605緊急 9.8The WP Hotel Booking plugin for WordPress is vulnerable to SQL Injection via the 'room_type' parameter of the /wphb/v1/rooms/search-rooms RE…